Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.

Published

2004-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

4.9

Impact Score

6.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	xscreensaver	xscreensaver	4.14	Yes
Application	xscreensaver	xscreensaver	4.16	Yes
Application	xscreensaver	xscreensaver	4.17	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc ([email protected])
http://secunia.com/advisories/20226 ([email protected])
http://secunia.com/advisories/20456 ([email protected])
http://secunia.com/advisories/20782 ([email protected])
http://secunia.com/advisories/22080 ([email protected])
http://securitytracker.com/id?1016150 ([email protected])
http://securitytracker.com/id?1016151 ([email protected])
http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm ([email protected])
http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html ([email protected])
http://www.jwz.org/xscreensaver/changelog.html ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:071 ([email protected])
http://www.novell.com/linux/security/advisories/2006_23_sr.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0498.html ([email protected])
http://www.securityfocus.com/bid/17471 Patch ([email protected])
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096 ([email protected])
https://usn.ubuntu.com/269-1/ ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/20226 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/20456 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/20782 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22080 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016150 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016151 (af854a3a-2127-422b-91ae-364da2661108)
http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm (af854a3a-2127-422b-91ae-364da2661108)
http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.jwz.org/xscreensaver/changelog.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:071 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_23_sr.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0498.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/17471 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096 (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/269-1/ (af854a3a-2127-422b-91ae-364da2661108)