CVE-2004-2655
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and...
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
Exploit likelihood
What each source reports
NVD Score used
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
CVE-2004-2655- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
CVE-2004-2655- Updated
- 2026-11-02
EUVDEUVD-2004-2645 No score
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
EUVD-2004-2645- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8jf-5q4f-2r9c No score
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and...
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
GHSA-j8jf-5q4f-2r9c- Updated
- 2026-11-02
OSV No score
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
CVE-2004-2655- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-2655 No score
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
- Record
DEBIAN-CVE-2004-2655- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xscreensaverDebian:12 |
before 4.18-1 | 4.18-1 |
xscreensaverDebian:13 |
before 4.18-1 | 4.18-1 |
xscreensaverDebian:14 |
before 4.18-1 | 4.18-1 |
xscreensaverRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaver-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaverRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaver-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaverRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaver-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaverRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
xscreensaver-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 1:4.10-20 | 1:4.10-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2655 is a medium vulnerability (CVSS 5.4) in Xscreensaver, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.35%, the 83rd percentile. Fixed in xscreensaver 4.18-1.
References
jwz.org/xscreensaver/changelog.html
support.avaya.com/elmodocs2/security/ASA-2006-107.htm
derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html
novell.com/linux/security/advisories/2006_23_sr.html
mandriva.com/security/advisories?name=MDKSA-2006:071
secunia.com/advisories/20782
Show 25 moreShow less
redhat.com/support/errata/RHSA-2006-0498.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149
securitytracker.com/id?1016151
securityfocus.com/bid/17471
usn.ubuntu.com/269-1
nvd.nist.gov/vuln/detail/CVE-2004-2655
github.com/advisories/GHSA-j8jf-5q4f-2r9c
security-tracker.debian.org/tracker/CVE-2004-2655
access.redhat.com/errata/RHSA-2006:0498
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0498.json
cve.org/CVERecord?id=CVE-2003-1294