CVE-2004-2655

Description

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.

References

https://usn.ubuntu.com/269-1/

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149

http://www.securityfocus.com/bid/17471

http://www.redhat.com/support/errata/RHSA-2006-0498.html

http://www.novell.com/linux/security/advisories/2006_23_sr.html

http://www.mandriva.com/security/advisories?name=MDKSA-2006:071

http://www.jwz.org/xscreensaver/changelog.html

http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html

http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm

http://securitytracker.com/id?1016151

http://securitytracker.com/id?1016150

http://secunia.com/advisories/22080

http://secunia.com/advisories/20782

http://secunia.com/advisories/20456

http://secunia.com/advisories/20226

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3