CVE-2004-2655

Published: Dec 31, 2004Modified: Apr 16, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.

Affected (3)

Products: Xscreensaver: Xscreensaver

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Xscreensaver Xscreensaver	Version 4.14
Xscreensaver Xscreensaver	Version 4.16
Xscreensaver Xscreensaver	Version 4.17

References (34)

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc (unsafe URL)

Source: secalert@redhat.com

http://secunia.com/advisories/20226

Source: secalert@redhat.com

http://secunia.com/advisories/20456

Source: secalert@redhat.com

http://secunia.com/advisories/20782

Source: secalert@redhat.com

http://secunia.com/advisories/22080

Source: secalert@redhat.com

http://securitytracker.com/id?1016150

Source: secalert@redhat.com

http://securitytracker.com/id?1016151

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm

Source: secalert@redhat.com

http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html

Source: secalert@redhat.com

http://www.jwz.org/xscreensaver/changelog.html

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:071

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_23_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0498.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17471

Source: secalert@redhat.com

Patch

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096

Source: secalert@redhat.com

https://usn.ubuntu.com/269-1/

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20226

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20456

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20782

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22080

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016150

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016151

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.jwz.org/xscreensaver/changelog.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:071

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_23_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0498.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17471

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/269-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.