CVE-2006-7240

Publication date 7 September 2010

Last updated 24 July 2024

Description

gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gnome-power-manager	10.04 LTS lucid	Not affected
	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Ignored end of life

Notes

sbeattie

this is somewhat confusing, this CVE is only referring to the issue that was fixed in the gutsy timeframe. The followup reappearance during karmic referred to in https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/428115 is another CVE, CVE-2009-4997.

References

Other references

https://www.cve.org/CVERecord?id=CVE-2006-7240