CVE-2007-1859

Published: May 2, 2007Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Affected (1)

Products: Xscreensaver: Xscreensaver

1 product

Configuration A

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Xscreensaver Xscreensaver	Version 4.10

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Linux Advanced Workstation	Version 2.1

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (36)

http://osvdb.org/35531

Source: secalert@redhat.com

http://secunia.com/advisories/25065

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25105

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25116

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25118

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25119

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25225

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25610

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200705-14.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:097

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_9_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0322.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/bid/23783

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017996

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-474-1

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/34054

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1293

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11459

Source: secalert@redhat.com

http://osvdb.org/35531

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25065

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25105

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25116

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25118

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25119

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25225

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25610

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200705-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:097

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_9_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0322.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/23783

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017996

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-474-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34054

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1293

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11459

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.