7.8

CVE-2011-2187

Exploit
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.377
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://access.redhat.com/security/cve/cve-2011-2187
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382
Third Party Advisory
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187
Third Party Advisory
Exploit
Issue Tracking
https://security-tracker.debian.org/tracker/CVE-2011-2187
Third Party Advisory
https://www.jwz.org/xscreensaver/changelog.html
Vendor Advisory
Release Notes
https://www.openwall.com/lists/oss-security/2011/06/06/17
Third Party Advisory
Mailing List