gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen locking and access an unattended workstation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Screensaver | Gnome | 3.4.0 (including) | 3.4.0 (including) |
| Screensaver | Gnome | 3.4.2 (including) | 3.4.2 (including) |
| Screensaver | Gnome | 3.4.3 (including) | 3.4.3 (including) |
| Screensaver | Gnome | 3.5.3 (including) | 3.5.3 (including) |
| Gnome-screensaver | Ubuntu | hardy | * |
References
- http://www.openwall.com/lists/oss-security/2012/08/03/3
- http://www.openwall.com/lists/oss-security/2012/08/03/5
- https://bugzilla.gnome.org/show_bug.cgi?id=679441
- http://www.openwall.com/lists/oss-security/2012/08/03/3
- http://www.openwall.com/lists/oss-security/2012/08/03/5
- https://bugzilla.gnome.org/show_bug.cgi?id=679441