4 results (0.003 seconds)

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 2

CVE-2011-2187

https://notcve.org/view.php?id=CVE-2011-2187

27 Nov 2019 — xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication. xscreensaver versiones anteriores a la versión 5.14, se bloquea durante la activación y deja la pantalla desbloqueada cuando está en Modo Blank Only y cuando DPMS está desactivado, lo que permite a atacantes locales acceder a los recursos sin identificación • https://access.redhat.com/security/cve/cve-2011-2187 • CWE-306: Missing Authentication for Critical Function •

CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2004-2655

https://notcve.org/view.php?id=CVE-2004-2655

31 Dec 2004 — rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen. • ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc •

CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2003-1294

https://notcve.org/view.php?id=CVE-2003-1294

31 Dec 2003 — Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack. • ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2003-0885

https://notcve.org/view.php?id=CVE-2003-0885

31 Dec 2003 — Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack. • http://bugs.gentoo.org/show_bug.cgi?id=41253 •