CVE - CVE-2010-2532

CVE-ID
CVE-2010-2532	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
DISPUTED lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=622083 URL:https://bugzilla.novell.com/show_bug.cgi?id=622083 CONFIRM:https://bugzillafiles.novell.org/attachment.cgi?id=375737 URL:https://bugzillafiles.novell.org/attachment.cgi?id=375737 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=614608 URL:https://bugzilla.redhat.com/show_bug.cgi?id=614608 MLIST:[oss-security] 20100715 CVE request: lxsession-logout URL:http://www.openwall.com/lists/oss-security/2010/07/15/1 MLIST:[oss-security] 20100715 Re: CVE request: lxsession-logout URL:http://www.openwall.com/lists/oss-security/2010/07/16/4 SUSE:SUSE-SR:2010:014 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20100630	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100630)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)