CVE-2009-2711

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.

Score

CVSS 2.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2009-08-07

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Opensolaris (Sun)
• Solaris (Sun)
• X11 (X.org)

References

• http://secunia.com/advisories/36170
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
• http://www.securityfocus.com/bid/35964
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838