LWN.net Logo

xscreensaver: possible password exposure

Package(s):xscreensaver CVE #(s):CVE-2004-2655
Created:April 11, 2006 Updated:May 24, 2006
Description: In some cases, xscreensaver did not properly grab the keyboard when reading the password for unlocking the screen, so that the password was typed into the currently active application window. The only known vulnerable case was when xscreensaver activated while an rdesktop session was currently active.
Alerts:
Red Hat RHSA-2006:0498-01 2006-05-23
Ubuntu USN-269-1 2006-04-11

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds