CVE-2009-2711

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.

• CWE-200

• http://secunia.com/advisories/36170Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
• http://www.securityfocus.com/bid/35964Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838
• http://secunia.com/advisories/36170Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1
• http://www.securityfocus.com/bid/35964Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838

Published

Aug 7, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2705CA SiteMinder allows remote attackers to bypass cross-site s…
• CVE-2009-2706Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2707Unspecified vulnerability in ia32el (aka the IA 32 emulation…
• CVE-2009-2708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2709Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2710Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2712Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7…
• CVE-2009-2713The CDCServlet component in Sun Java System Access Manager 7…
• CVE-2009-2714Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 …
• CVE-2009-2715Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS user…
• CVE-2009-2716The plugin functionality in Sun Java SE 6 before Update 15 d…
• CVE-2009-2717The Abstract Window Toolkit (AWT) implementation in Sun Java…