CVE-2007-1859: Medium severity redhat Enterprise Linux vulnerability
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1859?
CVE-2007-1859 is considered to be of medium severity due to its ability to allow local users to bypass authentication.
How do I fix CVE-2007-1859?
To fix CVE-2007-1859, update XScreenSaver to version 4.11 or later, which addresses the vulnerability.
Which software versions are affected by CVE-2007-1859?
CVE-2007-1859 specifically affects XScreenSaver version 4.10.
What can happen if CVE-2007-1859 is exploited?
Exploiting CVE-2007-1859 can lead to unauthorized access by allowing users to unlock the screen without proper authentication.
Is there a workaround for CVE-2007-1859?
A temporary workaround for CVE-2007-1859 is to disable the use of remote directory services for credentials until the software can be updated.