Executive Summary
| Summary | |
|---|---|
| Title | gnome-screensaver vulnerability |
| Informations | |||
|---|---|---|---|
| Name | USN-1716-1 | First vendor Publication | 2013-02-12 |
| Vendor | Ubuntu | Last vendor Modification | 2013-02-12 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.10 Summary: gnome-screensaver would allow unintended access to the user session. Software Description: - gnome-screensaver: GNOME screen saver and locker Details: It was discovered that gnome-screensaver did not start automatically after logging in. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an unlocked session. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: After a standard system update you need to restart your session to make all the necessary changes. References: Package Information: |
Original Source
| Url : http://www.ubuntu.com/usn/USN-1716-1 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:18164 | |||
| Oval ID: | oval:org.mitre.oval:def:18164 | ||
| Title: | USN-1716-1 -- gnome-screensaver vulnerability | ||
| Description: | gnome-screensaver would allow unintended access to the user session. | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-1716-1 CVE-2013-1050 | Version: | 7 |
| Platform(s): | Ubuntu 12.10 | Product(s): | gnome-screensaver |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 3 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-02-13 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1716-1.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 12:01:27 |
|
| 2013-03-18 21:19:33 |
|
| 2013-03-16 18:31:56 |
|
| 2013-02-12 17:18:50 |
|
