CVE-2007-3069: Medium severity Sun Solaris vulnerability

Published Jun 6, 2007

Updated

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.

Affected Software

2 affected components

Sun Solaris=10.0

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102834-1

Event History

Jun 6, 2007

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3069?

CVE-2007-3069 has a medium severity rating due to its potential to allow unauthorized physical access to user sessions.

How do I fix CVE-2007-3069?

To mitigate CVE-2007-3069, users should upgrade to the latest patch of Sun Solaris 10 that addresses the vulnerability.

Who is affected by CVE-2007-3069?

CVE-2007-3069 affects users of Sun Solaris 10 with GNOME sessions where Assistive Technology support is enabled.

What type of attack does CVE-2007-3069 enable?

CVE-2007-3069 enables physical attackers to take control of a logged-in session using the Alt-Tab sequence.

Is there a workaround for CVE-2007-3069?

A practical workaround for CVE-2007-3069 is to disable Assistive Technology support when not needed.