• info
• discussion
• exploit
• solution
• references

XScreenSaver Local Password Disclosure Vulnerability

Solution:
The vendor has released version 4.18 of XScreenSaver to address this issue.

Please see the referenced vendor advisories for more information on obtaining and applying fixes.


Jamie Zawinski XScreenSaver 4.14

• Jamie Zawinski xscreensaver-4.24.tar.gz
  http://www.jwz.org/xscreensaver/xscreensaver-4.24.tar.gz


• Mandriva xscreensaver-4.14-4.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva xscreensaver-4.14-4.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva xscreensaver-extrusion-4.14-4.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva xscreensaver-extrusion-4.14-4.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva xscreensaver-gl-4.14-4.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva xscreensaver-gl-4.14-4.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://wwwnew.mandriva.com/en/downloads/

Jamie Zawinski XScreenSaver 4.16

• Jamie Zawinski xscreensaver-4.24.tar.gz
  http://www.jwz.org/xscreensaver/xscreensaver-4.24.tar.gz


• Ubuntu screensaver-gnome_4.16-1ubuntu3.1_all.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/universe/x/xscreensaver/xscreen saver-gnome_4.16-1ubuntu3.1_all.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu11.1_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu11.1_amd64.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu11.1_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu11.1_i386.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu11.1_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu11.1_powerpc.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu3.1_amd64.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu3.1_amd64.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu3.1_i386.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu3.1_i386.deb


• Ubuntu xscreensaver-gl_4.16-1ubuntu3.1_powerpc.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r-gl_4.16-1ubuntu3.1_powerpc.deb


• Ubuntu xscreensaver-gnome_4.16-1ubuntu11.1_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/x/xscreensaver/xscreen saver-gnome_4.16-1ubuntu11.1_all.deb


• Ubuntu xscreensaver-nognome_4.16-1ubuntu11.1_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/x/xscreensaver/xscreen saver-nognome_4.16-1ubuntu11.1_all.deb


• Ubuntu xscreensaver-nognome_4.16-1ubuntu3.1_all.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/universe/x/xscreensaver/xscreen saver-nognome_4.16-1ubuntu3.1_all.deb


• Ubuntu xscreensaver_4.16-1ubuntu11.1_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu11.1_amd64.deb


• Ubuntu xscreensaver_4.16-1ubuntu11.1_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu11.1_i386.deb


• Ubuntu xscreensaver_4.16-1ubuntu11.1_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu11.1_powerpc.deb


• Ubuntu xscreensaver_4.16-1ubuntu3.1_amd64.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu3.1_amd64.deb


• Ubuntu xscreensaver_4.16-1ubuntu3.1_i386.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu3.1_i386.deb


• Ubuntu xscreensaver_4.16-1ubuntu3.1_powerpc.deb
  Ubuntu 4.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xscreensaver/xscreensave r_4.16-1ubuntu3.1_powerpc.deb

Jamie Zawinski XScreenSaver 4.17

• Jamie Zawinski xscreensaver-4.24.tar.gz
  http://www.jwz.org/xscreensaver/xscreensaver-4.24.tar.gz

Jamie Zawinski XScreenSaver 4.15

• Conectiva xscreensaver-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-4.15-62263U10 _1cl.i386.rpm


• Conectiva xscreensaver-gl-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-gl-4.15-62263 U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-ca-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-ca-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-da-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-da-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-de-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-de-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-es-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-es-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-et-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-et-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-fi-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-fi-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-fr-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-fr-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-hu-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-hu-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-it-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-it-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-ja-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-ja-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-ko-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-ko-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-nl-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-nl-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-no-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-no-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-pl-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-pl-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-pt-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-pt-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-pt_BR-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-pt_BR-4. 15-62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-ru-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-ru-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-sk-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-sk-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-sv-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-sv-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-vi-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-vi-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-wa-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-wa-4.15- 62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-zh_CN-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-zh_CN-4. 15-62263U10_1cl.i386.rpm


• Conectiva xscreensaver-i18n-zh_TW-4.15-62263U10_1cl.i386.rpm
  Version: 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/xscreensaver-i18n-zh_TW-4. 15-62263U10_1cl.i386.rpm