CVE-2008-0887

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-06 · updated 2026-06-16

Description

gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

Affected products

GNOME Screensaver: through 2.20.0

References

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
http://osvdb.org/35531
http://rhn.redhat.com/errata/RHSA-2008-0197.html
http://secunia.com/advisories/29595
http://secunia.com/advisories/29606
http://secunia.com/advisories/29742
http://secunia.com/advisories/29759
http://secunia.com/advisories/30967
http://secunia.com/advisories/32691
http://security.gentoo.org/glsa/glsa-200804-12.xml
http://securitytracker.com/id?1019749
http://www.mandriva.com/security/advisories?name=MDVSA-2008:132

Get alerted when CVE-2008-0887 or the next vulnerability affects your stack