Every CVE Search/ Get API key

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly...

4.6 MediumFix available

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Exploit likelihood

0.41%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
CVE-2007-1859
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
CVE-2007-1859
Updated
2026-11-02
EUVDEUVD-2007-1853 No score

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
EUVD-2007-1853
Updated
2026-11-03
GitHub AdvisoriesGHSA-fr4x-26r9-jx2p No score

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly...

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
GHSA-fr4x-26r9-jx2p
Weakness
CWE-287
Updated
2026-11-02
OSV No score

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
CVE-2007-1859
Updated
2026-11-02
OSVDEBIAN-CVE-2007-1859 No score

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.

Record
DEBIAN-CVE-2007-1859
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xscreensaver
Debian:12
 before 5.03-1
5.03-1
xscreensaver
Debian:13
 before 5.03-1
5.03-1
xscreensaver
Debian:14
 before 5.03-1
5.03-1
xscreensaver
Red Hat:enterprise_linux:2.1::as
 before 1:3.33-4.rhel21.5
1:3.33-4.rhel21.5
xscreensaver
Red Hat:enterprise_linux:2.1::aw
 before 1:3.33-4.rhel21.5
1:3.33-4.rhel21.5
xscreensaver
Red Hat:enterprise_linux:2.1::es
 before 1:3.33-4.rhel21.5
1:3.33-4.rhel21.5
xscreensaver
Red Hat:enterprise_linux:2.1::ws
 before 1:3.33-4.rhel21.5
1:3.33-4.rhel21.5
xscreensaver
Red Hat:enterprise_linux:3::as
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver
Red Hat:enterprise_linux:3::desktop
 before 1:4.10-21.el3
1:4.10-21.el3
Show 13 moreShow less
Affected packages
PackageAffectedFixed
xscreensaver-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver
Red Hat:enterprise_linux:3::es
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver
Red Hat:enterprise_linux:3::ws
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:4.10-21.el3
1:4.10-21.el3
xscreensaver
Red Hat:enterprise_linux:4::as
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver
Red Hat:enterprise_linux:4::desktop
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver
Red Hat:enterprise_linux:4::es
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver
Red Hat:enterprise_linux:4::ws
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14
xscreensaver-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:4.18-5.rhel4.14
1:4.18-5.rhel4.14

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1859 is a medium vulnerability (CVSS 4.6) in Xscreensaver, published May 2, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in xscreensaver 5.03-1.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open