Test ID:	1.3.6.1.4.1.25623.1.0.66904
Category:	Fedora Local Security Checks
Title:	Fedora Core 12 FEDORA-2010-1556 (gnome-screensaver)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to gnome-screensaver announced via advisory FEDORA-2010-1556. Update Information: gnome-screensaver currently doesn't deal with monitors getting removed properly. If the unlock dialog is on the removed monitor then the unlock dialog and its associated keyboard grab are not moved to an existing monitor when the monitor removal is processed. This means that users can gain access to the locked system by placing the mouse pointer on an external monitor and then disconnect the external monitor. https://bugzilla.gnome.org/show_bug.cgi?id=609337 References: [ 1 ] Bug #562217 - CVE-2010-0414 gnome-screensaver: loses its unlock dialog and keyboard grab sometimes when unplugging monitor https://bugzilla.redhat.com/show_bug.cgi?id=562217 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update gnome-screensaver' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2010-1556 Risk factor : High CVSS Score: 7.2
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0414 38149 http://www.securityfocus.com/bid/38149 38468 http://secunia.com/advisories/38468 38532 http://secunia.com/advisories/38532 38534 http://secunia.com/advisories/38534 62219 http://www.osvdb.org/62219 FEDORA-2010-1556 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html MDVSA-2010:040 http://www.mandriva.com/security/advisories?name=MDVSA-2010:040 USN-898-1 http://www.ubuntu.com/usn/USN-898-1 http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950 http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f https://bugzilla.gnome.org/show_bug.cgi?id=609337 https://bugzilla.redhat.com/show_bug.cgi?id=562217
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.