CVE-2007-6389 - The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read t

CVE-2007-6389

Summary

The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.

References

Vulnerable Configurations

cpe:2.3:a:gnome:screensaver:2.20:*:*:*:*:*:*:*
cpe:2.3:a:gnome:screensaver:2.20:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 31-10-2012 - 02:48)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	30096
confirm	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=455484 http://bugzilla.gnome.org/show_bug.cgi?id=482159 http://bugzilla.gnome.org/show_bug.cgi?id=503005 https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/146862 https://bugzilla.redhat.com/show_bug.cgi?id=421461
fedora	FEDORA-2008-2818 FEDORA-2008-2872
mandriva	MDVSA-2008:135
secunia	29595 29666 31687 32691
suse	SUSE-SR:2008:017
ubuntu	USN-669-1

Last major update

31-10-2012 - 02:48

Published

17-12-2007 - 18:46

Last modified

31-10-2012 - 02:48