PT-2004-3545 · Rdesktop+1 · Rdesktop+1

Publicado 2004-12-31 · Atualizado 2018-10-03 · CVE-2004-2655

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions rdesktop version 1.3.1

Description The issue occurs when rdesktop is used in conjunction with xscreensaver, specifically version 4.14, on Fedora and possibly other platforms. When xscreensaver starts, rdesktop fails to release the keyboard focus, resulting in the password being entered into the active window when the user unlocks the screen.

Recommendations For rdesktop version 1.3.1, consider disabling the use of xscreensaver as a temporary workaround until a patch is available. Restrict access to sensitive information when the screen is locked to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2655

RHSA-2006:0498

Produtos afetados

Rdesktop

Xscreensaver

Referências · 21

• http://secunia.com/advisories/20456 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2655 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_23_sr.html · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2006:071 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2006-0498.html · Aviso do Fabricante
• https://usn.ubuntu.com/269-1 · Aviso do Fabricante
• http://secunia.com/advisories/20782 · Nota
• http://securityfocus.com/bid/17471 · Correção
• https://security-tracker.debian.org/tracker/CVE-2004-2655 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm · Nota
• https://osv.dev/vulnerability/CVE-2004-2655 · Aviso do Fabricante
• http://secunia.com/advisories/22080 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096 · Nota
• http://securitytracker.com/id?1016150 · Nota