Ubuntu: gnome-screensaver vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Ubuntu: gnome-screensaver vulnerabilities
# 1  
Old 11-12-2008
Ubuntu: gnome-screensaver vulnerabilities

LinuxSecurity.com: It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. (CVE-2007-6389) Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication service. During a network interruption, or by disconnecting the network cable, a local attacker could gain access to locked sessions. (CVE-2008-0887)

More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Ubuntu

How to invoke Gnome on Ubuntu 14.10?

Sorry I am such a dummy but I wanted to change to the Gnome desktop instead of Unity and I have downloaded it-I do not know how to invoke or execute it. How do I bring it up ?Thank you in advance. joe (2 Replies)
Discussion started by: joboy
2 Replies
Login or Register to Ask a Question
GNOME-SETTINGS-DAE(1)						   User Commands					     GNOME-SETTINGS-DAE(1)

NAME
gnome-settings-daemon - GNOME settings daemon SYNOPSIS
gnome-settings-daemon [OPTION...] DESCRIPTION
gnome-settings-daemon provides many session-wide services and functions that require a long-running process. Among the services implemented by gnome-settings-daemon are an XSettings manager, which provides theming, font and other settings to GTK+ applications, and a clipboard manager, which preserves clipboard contents when an application exits. Many user interface elements of gnome-shell and gnome-control-center rely on gnome-settings-daemon for their functionality. The internal architecture of gnome-settings-daemon consists of a number of plugins, which provide functionality such as printer notifications, software update monitoring, background changing, etc. For debugging purposes, these plugins can be individually disabled by changing the gsettings key org.gnome.settings-daemon.plugins.plugin-name.active, where plugin-name is the name of the plugin. To see a list of all plugins, use the command gsettings list-children org.gnome.settings-daemon.plugins gnome-settings-daemon takes the name org.gnome.SettingsDaemon on the session bus to ensure that only one instance is running. Some plugins export objects under this name to make their functionality available to other applications. The interfaces of these objects should generally be considered private and unstable. gnome-settings-daemon is a required component of the GNOME desktop, i.e. it is listed in the RequiredComponents field of /usr/share/gnome-session/sessions/gnome.session. It is started in the initialization phase of the session, and gnome-session will restart it if it crashes. OPTIONS
-h, --help Prints a short help text and exits. --debug Enables debugging code. --timed-exit Exits after a timeout (30 seconds) for debugging. FILES
/usr/share/gnome-session/sessions/gnome.session GNOME session definition file where gnome-settings-daemon is listed as a required component. /etc/xdg/autostart/gnome-settings-daemon.desktop Autostart file for gnome-settings-daemon, where its autostart phase is set. SEE ALSO
gnome-shell(1), gnome-control-center(1), gnome-session(1) GNOME
GNOME-SETTINGS-DAE(1)