French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Advisories and vulnerabilities by Vendor
Advisories and vulnerabilities by Keyword
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Fedora Security Update Fixes xscreensaver Local Security Bypass Issue


Title : Fedora Security Update Fixes xscreensaver Local Security Bypass Issue
Advisory ID : FrSIRT/ADV-2007-3606
CVE ID : CVE-2007-5585
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2007-10-25

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

A vulnerability has been identified in Fedora, which could be exploited by local attackers to bypass security restrictions [...]

Solution

Upgrade the affected packages :

72e962e7d15b7d9b9174358b0935399d0f84c1ed xscreensaver-base-5.03-12.fc7.ppc64.rpm
1b1668c86c05a2a39501ca05305d46005129d3db xscreensaver-gl-extras-gss-5.03-12.fc7.ppc64.rpm
24535527f2da18f5c7cab8081a49206209c69c88 xscreensaver-debuginfo-5.03-12.fc7.ppc64.rpm
d395190a40f324596d637bcbf76b5262dd26af79 xscreensaver-extras-gss-5.03-12.fc7.ppc64.rpm
6f8f00d899c0a58631bc61b9621661ad0895d197 xscreensaver-gl-extras-5.03-12.fc7.ppc64.rpm
d7c4f66180614300877c75250c203d090df14ec0 xscreensaver-extras-5.03-12.fc7.ppc64.rpm
d1ebbc31e1c81533883a025f013e8b25521ab43c xscreensaver-5.03-12.fc7.ppc64.rpm
9401a1f9eebe74f29dd7a4d365cc0ac88f1c45f5 xscreensaver-gl-base-5.03-12.fc7.ppc64.rpm
5a4981a411919db94f2074bfcf9e1b175e9626ea xscreensaver-gl-base-5.03-12.fc7.i386.rpm
b3c270fa8efb3e4acaedb95cf8a6b284a8132488 xscreensaver-gl-extras-5.03-12.fc7.i386.rpm
9f44a8153be4bf830f5d97254fe753d5e89d9c98 xscreensaver-base-5.03-12.fc7.i386.rpm
1c023d71b30c2bbb5bf7fc5cd8569b9eaa71fbde xscreensaver-extras-5.03-12.fc7.i386.rpm
e6ac4a93f3764d5803757e443ab212bc08029fed xscreensaver-gl-extras-gss-5.03-12.fc7.i386.rpm
bd91444724e671234debf05b532e0ad16379e3f0 xscreensaver-extras-gss-5.03-12.fc7.i386.rpm
91b34cf194a4aa15642e4d6d648c6f524244a1ef xscreensaver-5.03-12.fc7.i386.rpm
133a737c6c8026927130a20a02588474feeab45e xscreensaver-debuginfo-5.03-12.fc7.i386.rpm
06124bf05d156132c15e39f2a40ff4dad4f0c071 xscreensaver-gl-base-5.03-12.fc7.x86_64.rpm
806b54ca6e430815436ab39bf4654e8b8ef12848 xscreensaver-gl-extras-gss-5.03-12.fc7.x86_64.rpm
43b05faa493608111d0fb4d05da36e763acd657d xscreensaver-gl-extras-5.03-12.fc7.x86_64.rpm
775b84067d05bf1a805dec269a538e48eb7c8851 xscreensaver-5.03-12.fc7.x86_64.rpm
6f1216148e2e787d1d9ee549f2320053efed6891 xscreensaver-extras-gss-5.03-12.fc7.x86_64.rpm
534e6566517210f9f82cbeffa8025c110e27d53a xscreensaver-debuginfo-5.03-12.fc7.x86_64.rpm
0e2e21c32368cd5e5170ee0f605e9801149b768a xscreensaver-base-5.03-12.fc7.x86_64.rpm
8e474684f3dec44e614e5e96619bf8fe5bf024f1 xscreensaver-extras-5.03-12.fc7.x86_64.rpm
e1a6f8edb9e6b5246ee82120e84e3f8ce7f95475 xscreensaver-5.03-12.fc7.ppc.rpm
e57175e44ade81791fdcfdfd75595cab1cf02028 xscreensaver-gl-base-5.03-12.fc7.ppc.rpm
89c87c86050e422888d014d945094620932fb544 xscreensaver-gl-extras-gss-5.03-12.fc7.ppc.rpm
8e5ba07c80f17b134d69cf4f5535e062362b56a5 xscreensaver-debuginfo-5.03-12.fc7.ppc.rpm
c479af9469bfaf7290e179a39dffc4c7a060834e xscreensaver-extras-5.03-12.fc7.ppc.rpm
6342fc5b575ce2bbd2a476b97badaaa4ab1265e3 xscreensaver-gl-extras-5.03-12.fc7.ppc.rpm
824193b15833035fb095cc6b1fae0bd483847627 xscreensaver-base-5.03-12.fc7.ppc.rpm
f9f1800b9032a155eca9802c51f4959b78c00e0c xscreensaver-extras-gss-5.03-12.fc7.ppc.rpm
5111f16c6eb58d87ea140db1875755614c1c9745 xscreensaver-5.03-12.fc7.src.rpm
090e62166c8dcf1ca01e4e6e4fea14bdab9b1b2d rss-glx-debuginfo-0.8.1.p-15.fc7.ppc64.rpm
f671868d9608c8905681309c04e417c70f5a781d rss-glx-0.8.1.p-15.fc7.ppc64.rpm
194530d0544041586521d2d969b0d5819b60fa9b rss-glx-gnome-screensaver-0.8.1.p-15.fc7.ppc64.rpm
a2f35250d288a07a3b69d798985592c2d0e5160b rss-glx-kde-0.8.1.p-15.fc7.ppc64.rpm
2bb0f4275801e23c94ed6a8b70959c052b7d7731 rss-glx-xscreensaver-0.8.1.p-15.fc7.ppc64.rpm
c93eaebc762f7e9616747758d99b9eea2dfbe98a rss-glx-kde-0.8.1.p-15.fc7.i386.rpm
6c041ee34cdc3f165efab9b1da6ac4779b78596c rss-glx-xscreensaver-0.8.1.p-15.fc7.i386.rpm
f84a156428cd84a9766ca45eb9bd406beffd8a8e rss-glx-0.8.1.p-15.fc7.i386.rpm
4863f633bea1301c50440779852d965742218c92 rss-glx-debuginfo-0.8.1.p-15.fc7.i386.rpm
1017b5fd2685d8f08bfc09874ab7aa64db3ff958 rss-glx-gnome-screensaver-0.8.1.p-15.fc7.i386.rpm
37c66e59cdf94f46197bf282d56d2eceef669a93 rss-glx-0.8.1.p-15.fc7.x86_64.rpm
079a244fe1721e2235743a117ae4957694a64a27 rss-glx-xscreensaver-0.8.1.p-15.fc7.x86_64.rpm
fd375fcb97294f0f639fc8d13f29c2f80b69ddb8 rss-glx-debuginfo-0.8.1.p-15.fc7.x86_64.rpm
3cee3d0fde9337d32181fe5bf04a49b95166becd rss-glx-gnome-screensaver-0.8.1.p-15.fc7.x86_64.rpm
cf148e049ab4e3976bb7ff5f34f45805ec5c6bf9 rss-glx-kde-0.8.1.p-15.fc7.x86_64.rpm
c7b5c404860568d1f043a8b2a3c5c5d48caeb450 rss-glx-xscreensaver-0.8.1.p-15.fc7.ppc.rpm
55fe6f201d7a305702cac1626bcaf7df2a1dcf78 rss-glx-debuginfo-0.8.1.p-15.fc7.ppc.rpm
d690d10c2190ae9f4352939159e4586d71303aea rss-glx-0.8.1.p-15.fc7.ppc.rpm
0c6b0b64f289052b8817a50f7e2dd2e2b1070505 rss-glx-kde-0.8.1.p-15.fc7.ppc.rpm
9ed17fbe3dd7ca1fa4e772e80c2d7462df133c68 rss-glx-gnome-screensaver-0.8.1.p-15.fc7.ppc.rpm
83ad6d0f2c09c9f36f4016b29f8476264a6466fa rss-glx-0.8.1.p-15.fc7.src.rpm
4740a12c68ce8636caa30f341379aaafe00cf37f tempest-kde-0-0.4.20070929.fc7.ppc64.rpm
439106aa48bcc11f2f38970020b80512b4601839 tempest-debuginfo-0-0.4.20070929.fc7.ppc64.rpm
0703a384c747e3b57043a19837ee9295906a8ef6 tempest-xscreensaver-0-0.4.20070929.fc7.ppc64.rpm
56289a9cb324fe1d34340e7942ce03ad58e91852 tempest-gnome-screensaver-0-0.4.20070929.fc7.ppc64.rpm
65c2e3b9c24320a75d1d8f829bcad7b077e6cc05 tempest-0-0.4.20070929.fc7.ppc64.rpm
59eeb9714c0b47f2e126119e0241dfc79434adbc tempest-xscreensaver-0-0.4.20070929.fc7.i386.rpm
19264ae32e678d498b67aa57ba01a8e51e023728 tempest-kde-0-0.4.20070929.fc7.i386.rpm
7b5219144298b81b37dc60ef8b30ac84fe7d5106 tempest-0-0.4.20070929.fc7.i386.rpm
a9252b0cdf5a10d9ef7428db6ea3442183eea81c tempest-gnome-screensaver-0-0.4.20070929.fc7.i386.rpm
22a258c8b4fcb257a00d573fc3a3d8df83502999 tempest-debuginfo-0-0.4.20070929.fc7.i386.rpm
6a0a31f93142975d4646a2a6f7b85cee38f927fe tempest-debuginfo-0-0.4.20070929.fc7.x86_64.rpm
757356c9386656b87c6b9c92180a74efe05b1b7e tempest-gnome-screensaver-0-0.4.20070929.fc7.x86_64.rpm
e97b8f23a512b6235573065653eec7dcc69f0fa0 tempest-xscreensaver-0-0.4.20070929.fc7.x86_64.rpm
7a45a8f412a4364714030ce98a892eaba6c4af5d tempest-0-0.4.20070929.fc7.x86_64.rpm
5c7660d317e75a72b2406b564cce2df07d42da7a tempest-kde-0-0.4.20070929.fc7.x86_64.rpm
0830ff0226a690e4f7f4f8037fb4b038dd18b520 tempest-debuginfo-0-0.4.20070929.fc7.ppc.rpm
dba6f446d3f074b1cf6d02fba02ab46811be1228 tempest-gnome-screensaver-0-0.4.20070929.fc7.ppc.rpm
1cf5767dca3d6b5813db0c003513dbc6b3ca079c tempest-0-0.4.20070929.fc7.ppc.rpm
15426c88141a503da051baf6f7ecfe9c0ba9e1a0 tempest-kde-0-0.4.20070929.fc7.ppc.rpm
1316e4f13af1676c05865799346b13917c15c68b tempest-xscreensaver-0-0.4.20070929.fc7.ppc.rpm
736f7ec55d860b6238abe4d3e91b87046afc51ae tempest-0-0.4.20070929.fc7.src.rpm
aac98b946371f070413e63e0b795ed139ec717e1 xscreensaver-gl-base-5.03-14.fc7.ppc64.rpm
a723ff60cd0ee48368d442a1d8faad1e5cb10dd2 xscreensaver-gl-extras-gss-5.03-14.fc7.ppc64.rpm
7ce9b6647d87c2e984da262adf578528a3a605cb xscreensaver-extras-5.03-14.fc7.ppc64.rpm
3788862aa89dff37cee15f95dc24c5f2be2696c2 xscreensaver-debuginfo-5.03-14.fc7.ppc64.rpm
1d696e321e8ad21bf7e1ac4d15e4338b70a293df xscreensaver-5.03-14.fc7.ppc64.rpm
eb192cd39e924d4475ab3b97b14f5df668279125 xscreensaver-gl-extras-5.03-14.fc7.ppc64.rpm
f4f384c4c001669f3c7a5c7013b578ad05b7136f xscreensaver-extras-gss-5.03-14.fc7.ppc64.rpm
cb298740c8a7ad249d32f1cfb1f7bf85a289a1ee xscreensaver-base-5.03-14.fc7.ppc64.rpm
f9049ed42de17feae967ccdf178e6f54ff5b1854 xscreensaver-gl-base-5.03-14.fc7.i386.rpm
06d4365f5a927dd311129b44ade46396df17493b xscreensaver-extras-gss-5.03-14.fc7.i386.rpm
6adf76b37e74b9c4cbba008dcb9b8e2e03049392 xscreensaver-5.03-14.fc7.i386.rpm
b8919b31b4241b53eef6f0a01e99049990499376 xscreensaver-base-5.03-14.fc7.i386.rpm
cb6d4853ec23c2d4c744c0ae30940c6313e73690 xscreensaver-gl-extras-gss-5.03-14.fc7.i386.rpm
ccae1a3b543cdd7a078903808b60f9b6d789232e xscreensaver-debuginfo-5.03-14.fc7.i386.rpm
bf2dbcee43cf713430983fee8a96701616ba9f32 xscreensaver-gl-extras-5.03-14.fc7.i386.rpm
a41dcdb7b55627cf96478ef4bd7b323748c0b330 xscreensaver-extras-5.03-14.fc7.i386.rpm
313189276a2fdc81eb3106b1ffe54540c7abd71e xscreensaver-gl-extras-gss-5.03-14.fc7.x86_64.rpm
e56aed27061ec2829138a00f8ffc8bfd469a31a0 xscreensaver-base-5.03-14.fc7.x86_64.rpm
cb9b2dec9b1020ea7cb5413512af229a233becf0 xscreensaver-extras-gss-5.03-14.fc7.x86_64.rpm
4b37ca5ba11034705f978362f5eac3078550449e xscreensaver-extras-5.03-14.fc7.x86_64.rpm
b22edcfe9daeeca8b6de9878d83ef3824ae42869 xscreensaver-gl-base-5.03-14.fc7.x86_64.rpm
c2fd398c94c8a3c4e85ea1ead8557bc649a0e0d5 xscreensaver-debuginfo-5.03-14.fc7.x86_64.rpm
ad638db05cdc1ad721e4fa20a59ab33c44e16736 xscreensaver-5.03-14.fc7.x86_64.rpm
2ad651e5f2f24252ea12f2b7b86eef85223a87c0 xscreensaver-gl-extras-5.03-14.fc7.x86_64.rpm
84f9271ee49e05f2a865fbde7b0dee876cc887c4 xscreensaver-gl-extras-5.03-14.fc7.ppc.rpm
665feb1d9f3aadef4dbe2e2ffc605bf8f02fa831 xscreensaver-extras-gss-5.03-14.fc7.ppc.rpm
133f11f1e1a7771c8f3432129a36bef3cab67760 xscreensaver-extras-5.03-14.fc7.ppc.rpm
fb15d12cdd01e68b121bae454e5051ae866f718f xscreensaver-base-5.03-14.fc7.ppc.rpm
da3b32aaa9ecd63f0fb9552f49b9378c8a450f97 xscreensaver-gl-base-5.03-14.fc7.ppc.rpm
1d62f1a8c2850dace425ff60fca5ffc0d579d88c xscreensaver-5.03-14.fc7.ppc.rpm
641e360f0122685b9d5a7658b15bf8e99775063a xscreensaver-gl-extras-gss-5.03-14.fc7.ppc.rpm
f3e7b042093ad471a46c87a3f64095d76dcf5e6b xscreensaver-debuginfo-5.03-14.fc7.ppc.rpm
b62e0d1e4e59af8130af7c9ed854b49d2409c584 xscreensaver-5.03-14.fc7.src.rpm

ChangeLog

2007-10-25 : Initial release
2007-11-02 : Updated Solution

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Apple Mac OS X Code Execution and Security Bypass Vulnerabilities

Apple iPhone and iPod touch Multiple Code Execution Vulnerabilities

Apple Xcode Code Execution and Information Disclosure Vulnerabilities

Apple TV Data Processing Remote Code Execution Vulnerabilities

Apple Mac OS X Command Execution and Security Bypass Issues

Apple Safari for Mac OS X Remote Code Execution Vulnerability

Apple Mac OS X ARDAgent Local Privilege Escalation Vulnerability

Oracle Products Multiple Code Execution and Security Bypass Issues

Oracle Products Command Execution and SQL Injection Vulnerabilities

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle Database "PITRIG_DROPMETADATA" Buffer Overflow Vulnerability

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle JInitiator ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Oracle Products Multiple Remote Command Execution and SQL Injection Vulnerabilities

Mozilla Firefox for Mac OS X GIF Rendering Code Execution Vulnerability

Mozilla Products Remote Code Execution and Security Bypass Issues

Mozilla Products Code Execution and Injection Vulnerabilities

Mozilla JavaScript Garbage Collector Code Execution Vulnerability

Mozilla Thunderbird Code Execution and Cross Site Scripting Issues

Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy