Detections
Analytics
CentOS 5 : gnome-screensaver (CESA-2008:0197)
medium Nessus Plugin ID 43679
Language:
Synopsis
The remote CentOS host is missing a security update.Description
An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5.This update has been rated as having moderate security impact by the Red Hat Security Response Team.
gnome-screensaver is the GNOME project's official screen saver program.
A flaw was found in the way gnome-screensaver verified user passwords.
When a system used a remote directory service for login credentials, a local attacker able to cause a network outage could cause gnome-screensaver to crash, unlocking the screen. (CVE-2008-0887)
Users of gnome-screensaver should upgrade to this updated package, which contains a backported patch to correct this issue.
Solution
Update the affected gnome-screensaver package.See Also
Plugin Details
Severity: Medium
ID: 43679
File Name: centos_RHSA-2008-0197.nasl
Version: 1.12
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 1/6/2010
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.7
Temporal Score: 3.5
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: p-cpe:/a:centos:centos:gnome-screensaver, cpe:/o:centos:centos:5
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 4/23/2008
Vulnerability Publication Date: 4/6/2008
Reference Information
CVE: CVE-2008-0887
BID: 28575
RHSA: 2008:0197