openSUSE LXDE Local Unauthorized Access Vulnerability

Bugtraq ID:	41709
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 13 2010 12:00AM
Updated:	Jul 13 2010 12:00AM
Credit:	Guido Berhörster
Vulnerable:	S.u.S.E. openSUSE 11.3
Not Vulnerable:

openSUSE LXDE Local Unauthorized Access Vulnerability

openSUSE LXDE is prone to a local unauthorized-access vulnerability.

Exploiting this issue could allow local attackers to gain unauthorized access to a user session. Successful exploits may lead to other attacks.

openSUSE 11.3 is vulnerable; other versions may be affected.

openSUSE LXDE Local Unauthorized Access Vulnerability

Due to the nature of the vulnerability an exploit may not be needed.

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

openSUSE LXDE Local Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references for details.

openSUSE LXDE Local Unauthorized Access Vulnerability

References:

• Bug 622083 - VUL-0: lxsession-logout should lock the screen before suspending/hi (Guido Berhörster)
  
• CVE request: lxsession-logout (Matthias)
  
• Guido Berhörster 2010-07-13 22:20:55 UTC (Created an attachment (id=375737)) (Guido Berhörster)