Test ID:	1.3.6.1.4.1.25623.1.0.56564
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-269-1 (xscreensaver)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to xscreensaver announced via advisory USN-269-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: xscreensaver xscreensaver-gl xscreensaver-gnome xscreensaver-nognome In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently active. Solution: The problem can be corrected by upgrading the affected package to version 4.16-1ubuntu3.1 (for Ubuntu 4.10), or 4.16-1ubuntu11.1 (for Ubuntu 5.04). After a standard system upgrade you need to restart your session to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-269-1 Risk factor : High CVSS Score: 5.4
Cross-Ref:	BugTraq ID: 17471 Common Vulnerability Exposure (CVE) ID: CVE-2004-2655 1016150 http://securitytracker.com/id?1016150 1016151 http://securitytracker.com/id?1016151 17471 http://www.securityfocus.com/bid/17471 20060602-01-U ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc 20226 http://secunia.com/advisories/20226 20456 http://secunia.com/advisories/20456 20782 http://secunia.com/advisories/20782 22080 http://secunia.com/advisories/22080 MDKSA-2006:071 http://www.mandriva.com/security/advisories?name=MDKSA-2006:071 RHSA-2006:0498 http://www.redhat.com/support/errata/RHSA-2006-0498.html SUSE-SR:2006:023 http://www.novell.com/linux/security/advisories/2006_23_sr.html USN-269-1 https://usn.ubuntu.com/269-1/ http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html http://www.jwz.org/xscreensaver/changelog.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149 oval:org.mitre.oval:def:10096 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.