FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-0414

This CVE name corresponds to:

Entered Topic
2010-02-13 gnome-screensaver -- Multiple monitor hotplug issues

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2010-0414
Phase Assigned(20100127)

Description

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.

References

Source Reference
CONFIRM http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
CONFIRM https://bugzilla.gnome.org/show_bug.cgi?id=609337
CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=562217
FEDORA FEDORA-2010-1556
MANDRIVA MDVSA-2010:040
UBUNTU USN-898-1
BID 38149
OSVDB 62219
SECUNIA 38468
SECUNIA 38534
SECUNIA 38532