CVE Feed

    Dashboard / CVE / CVE-2008-0887

    CVE-2008-0887

    gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

    Published:Apr 2, 2008
    Last Modified:Apr 23, 2026
    EPS:Apr 6, 2008
    EPSS Score:0.00239
    CVSS Score:4.7

    Affected Products

    Vendor
    Gnome
    Product
    Screensaver
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=435773https://bugzilla.redhat.com/show_bug.cgi?id=435773

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2012-3452 (CVSS 3.3) — gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the sc…
    CVE-2010-0422 (CVSS 4) — gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unloc…
    CVE-2009-4642 (CVSS 7.2) — gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when…
    CVE-2010-0414 (CVSS 7.2) — gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an u…
    CVE-2009-4641 (CVSS 7.2) — gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application …
    CVE-2010-0732 (CVSS 6.2) — gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on…
    CVE-2010-0285 (CVSS 5.6) — gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend scre…
    CVE-2007-6389 (CVSS 2.1) — The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboa…
    CVE-2007-3920 (CVSS 6.2) — GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which all…
    CVE-2006-1335 (CVSS 3.7) — gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs e…

    References

    http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
    http://osvdb.org/35531
    http://rhn.redhat.com/errata/RHSA-2008-0197.html
    http://secunia.com/advisories/29595
    http://secunia.com/advisories/29606
    http://secunia.com/advisories/29742
    http://secunia.com/advisories/29759
    http://secunia.com/advisories/30967
    http://secunia.com/advisories/32691
    http://security.gentoo.org/glsa/glsa-200804-12.xml
    http://securitytracker.com/id?1019749
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:132
    http://www.redhat.com/support/errata/RHSA-2008-0218.html
    http://www.securityfocus.com/bid/28575
    http://www.ubuntu.com/usn/USN-669-1
    https://bugzilla.redhat.com/show_bug.cgi?id=435773
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00163.html
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00206.html
    http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
    http://osvdb.org/35531
    http://rhn.redhat.com/errata/RHSA-2008-0197.html
    http://secunia.com/advisories/29595
    http://secunia.com/advisories/29606
    http://secunia.com/advisories/29742
    http://secunia.com/advisories/29759
    http://secunia.com/advisories/30967
    http://secunia.com/advisories/32691
    http://security.gentoo.org/glsa/glsa-200804-12.xml
    http://securitytracker.com/id?1019749
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:132
    http://www.redhat.com/support/errata/RHSA-2008-0218.html
    http://www.securityfocus.com/bid/28575
    http://www.ubuntu.com/usn/USN-669-1
    https://bugzilla.redhat.com/show_bug.cgi?id=435773
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00163.html
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00206.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High