Description
GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console.
References
- http://www.jwz.org/xscreensaver/faq.html#root-lock
- 36586 vdb-entry
- 101338 vendor-advisory
- oval:org.mitre.oval:def:2037 vdb-entry signature