Published: 29/10/2007 Updated: 29/09/2017

CVSS v2 Base Score: 6.2 | Impact Score: 10 | Exploitability Score: 1.9

VMScore: 552

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome screensaver 2.20
compiz compiz

Debian Bug report logs - #449108 CVE-2007-3920: bypass password authentication Package: xserver-xorg-core; Maintainer for xserver-xorg-core is Debian X Strike Force <debian-x@listsdebianorg>; Source for xserver-xorg-core is src:xorg-server (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde&g ...

USN-537-1 fixed vulnerabilities in gnome-screensaver The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it This update fixes related problems in compiz ...

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus A local attacker could exploit this to bypass the user’s locked screen saver ...

NVD-CWE-Other http://www.ubuntu.com/usn/usn-537-1 http://www.securityfocus.com/bid/26188 http://secunia.com/advisories/27381 http://www.ubuntu.com/usn/usn-537-2 https://bugzilla.redhat.com/show_bug.cgi?id=357071 https://bugzilla.redhat.com/show_bug.cgi?id=363061 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00811.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00841.html http://secunia.com/advisories/28627 http://www.redhat.com/support/errata/RHSA-2008-0485.html http://secunia.com/advisories/30329 http://secunia.com/advisories/30715 http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html https://exchange.xforce.ibmcloud.com/vulnerabilities/37410 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10192 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449108 https://nvd.nist.gov https://usn.ubuntu.com/537-2/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3920

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect