REDHAT-BUG-557525
First published: Thu Jan 21 2010(Updated: )
It was reported [1] that the GNOME screensaver could insecurely unlock a secondary screen when moving from a single screen display to a dual-screen display. If a user were to have a suspended laptop, attach an external monitor, resume, and attempt to unlock the GNOME screensaver, the external display will show the GNOME desktop and can be interacted with, without requiring a password. Upstream has provided a possible patch to correct the issue [2]. <a href="https://access.redhat.com/security/cve/CVE-2010-0285">CVE-2010-0285</a> has been assigned to this issue. [1] <a href="https://bugzilla.gnome.org/show_bug.cgi?id=593616">https://bugzilla.gnome.org/show_bug.cgi?id=593616</a> [2] <a href="http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca">http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNOME Screensaver |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-557525?
The severity of REDHAT-BUG-557525 is classified as moderate due to potential unauthorized access when unlocking the screensaver on a secondary display.
How do I fix REDHAT-BUG-557525?
To fix REDHAT-BUG-557525, users should update their GNOME screensaver to the latest version that addresses this vulnerability.
What versions of GNOME screensaver are affected by REDHAT-BUG-557525?
REDHAT-BUG-557525 affects earlier versions of the GNOME screensaver prior to the security updates that address this issue.
What is the impact of REDHAT-BUG-557525?
The impact of REDHAT-BUG-557525 allows unauthorized users to potentially access sensitive information on a secondary screen when the primary screen is locked.
How can users mitigate the risks associated with REDHAT-BUG-557525?
Users can mitigate the risks of REDHAT-BUG-557525 by ensuring their screensaver settings require authentication and by applying the latest software updates.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0285
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnome
- canonical/gnome screensaver