CVE-2006-7240: High severity gnome power manager vulnerability
gnome-power-manager 2.14.0 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7240?
CVE-2006-7240 is classified as a moderate severity vulnerability due to its potential to allow physical access to an unattended laptop.
How do I fix CVE-2006-7240?
To resolve CVE-2006-7240, ensure that the lock_on_suspend and lock_on_hibernate settings are properly configured in the gnome-power-manager settings.
What versions of Gnome Power Manager are affected by CVE-2006-7240?
CVE-2006-7240 specifically affects Gnome Power Manager version 2.14.0.
What is the impact of CVE-2006-7240?
The impact of CVE-2006-7240 is that it could allow an attacker with physical access to bypass the screen lock on a suspended or hibernated machine.
Is there a workaround for CVE-2006-7240?
A possible workaround for CVE-2006-7240 is to manually lock the screen before suspending or hibernating the device.