CVE-2010-0285

gnome-screensaver <2.29 - Auth Bypass

Title source: llm
STIX 2.1

Description

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

References (7)

Core 7
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.gnome.org/show_bug.cgi?id=593616
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=557525
Third Party Advisory x_refsource_confirm
http://security-tracker.debian.org/tracker/CVE-2010-0285
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/56366
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:093
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38254

Scores

EPSS 0.0008
EPSS Percentile 24.2%

Details

Status published
Products (5)
gnome/screensaver 2.14.3
gnome/screensaver 2.22.2
gnome/screensaver 2.27
gnome/screensaver 2.28.0
gnome/screensaver 2.28.3
Published Feb 24, 2010
Tracked Since Feb 18, 2026