Login Request a demo
Unscored severity · published Apr 6, 2008
CVE-2008-0887
gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate…
–
CVSS
1.3%
EPSS
No
On KEV
Description
gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Screensaver · Gnome
through 2.20.0 · source: NVD
Affected product
SC
Screensaver
Gnome
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0887
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0887
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
osvdb.org
http://osvdb.org/35531
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2008-0197.html
Vendor Advisory
http://secunia.com/advisories/29595
Vendor Advisory
http://secunia.com/advisories/29606
secunia.com
http://secunia.com/advisories/29742
More from Screensaver
–
CVE-2012-3452
gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate…
–
CVE-2010-0732
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in…
–
CVE-2010-0422
gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors,…
–
CVE-2010-0285
gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen…
–
CVE-2009-4642
gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows…