The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.

A vulnerability was found in gnome-screensaver 2.20.0 that could possibly allow a local user to read the clipboard contents and X selection data for a locked session by using CTRL-V (CVE-2007-6389).

The updated packages have been patched to correct this issue.

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. (CVE-2007-6389)

Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication service.
During a network interruption, or by disconnecting the network cable, a local attacker could gain access to locked sessions. (CVE-2008-0887).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of gnome-screensaver disallows local users to read the contents of the clipboard for a locked screen using ctrl-v.
(CVE-2007-6389)

This update addresses CVE-2007-6389 a flaw where the contents of the user's clipboard can be accessed from the 'Leave Message' feature within the lock screen dialog.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
37945	Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2008:135)	Nessus	Mandriva Local Security Checks	low
36364	Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)	Nessus	Ubuntu Local Security Checks	medium
33896	openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5506)	Nessus	SuSE Local Security Checks	low
31750	Fedora 8 : gnome-screensaver-2.20.0-11.fc8 (2008-2872)	Nessus	Fedora Local Security Checks	low
31744	Fedora 7 : gnome-screensaver-2.18.2-3.fc7 (2008-2818)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2007-6389

medium

Tenable Plugins

low

medium

low

low

low