CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c…

published May 2, 2007

CVSS
—
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.2th percentile
Published
2007-05-02T20:00Z
EPSS history
Timeline
  • 02 MAY 20:00Z
    XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c…
    cvelistv5