Executive Summary

Informations
Name CVE-2015-8025 First vendor Publication 2015-11-10
Vendor Cve Last vendor Modification 2016-12-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score 2.1 Attack Range Local
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8025

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 1

Nessus® Vulnerability Scanner

Date Description
2016-01-12 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3438.nasl - Type : ACT_GATHER_INFO
2016-01-04 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-2053-2.nasl - Type : ACT_GATHER_INFO
2015-11-23 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-2053-1.nasl - Type : ACT_GATHER_INFO
2015-11-23 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-2054-1.nasl - Type : ACT_GATHER_INFO
2015-11-20 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2015-783.nasl - Type : ACT_GATHER_INFO
2015-11-04 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-2789-1.nasl - Type : ACT_GATHER_INFO
2015-11-02 Name : The remote Debian host is missing a security update.
File : debian_DLA-338.nasl - Type : ACT_GATHER_INFO
2015-10-28 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_4b9393b87c0c11e5a010080027ddead3.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
https://www.jwz.org/blog/2015/10/xscreensaver-5-34/
DEBIAN http://www.debian.org/security/2016/dsa-3438
MISC https://twitter.com/Thaolia/status/656823859304398848
MLIST http://www.openwall.com/lists/oss-security/2015/10/24/2
http://www.openwall.com/lists/oss-security/2015/10/25/1
http://www.openwall.com/lists/oss-security/2015/10/29/12
SECTRACK http://www.securitytracker.com/id/1034052
SUSE http://lists.opensuse.org/opensuse-updates/2015-11/msg00102.html
UBUNTU http://www.ubuntu.com/usn/USN-2789-1

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
Date Informations
2021-05-04 12:43:13
  • Multiple Updates
2021-04-22 01:52:29
  • Multiple Updates
2020-05-23 00:47:22
  • Multiple Updates
2016-12-07 21:24:56
  • Multiple Updates
2016-09-23 09:23:47
  • Multiple Updates
2016-01-13 13:25:06
  • Multiple Updates
2016-01-05 13:26:14
  • Multiple Updates
2015-11-24 13:26:47
  • Multiple Updates
2015-11-21 13:26:09
  • Multiple Updates
2015-11-13 00:24:17
  • Multiple Updates
2015-11-10 21:24:23
  • First insertion