cinnamon-screensaver CVE-2014-1949 Lock Screen Local Security Bypass Vulnerability

Bugtraq ID:	65515
Class:	Design Error
CVE:	CVE-2014-1949
Remote:	No
Local:	Yes
Published:	Feb 12 2014 12:00AM
Updated:	Apr 13 2015 10:16PM
Credit:	Clemens Fries
Vulnerable:	Ubuntu Ubuntu Linux 14.04 LTS Linux Mint cinnamon-screensaver 2.0.3 Linux Mint Cinnamon 2.0.14
Not Vulnerable:

cinnamon-screensaver CVE-2014-1949 Lock Screen Local Security Bypass Vulnerability

cinnamon-screensaver is prone to a security-bypass vulnerability.



An attacker with physical access to the desktop may be able to bypass the desktop-locking screen that may aid in further attacks.



cinnamon-screensaver 2.0.3 is vulnerable; other versions may also be affected.

cinnamon-screensaver CVE-2014-1949 Lock Screen Local Security Bypass Vulnerability

An attacker with physical access to the computer can exploit this issue.

cinnamon-screensaver CVE-2014-1949 Lock Screen Local Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

cinnamon-screensaver CVE-2014-1949 Lock Screen Local Security Bypass Vulnerability

References:

• Cinnamon Product Page (Linux Mint)
  
• cinnamon-screensaver Product Page (Linux Mint)