Bug 189211

Summary: CVE-2004-2655 XScreenSaver Local Password Disclosure
Product: [Retired] Fedora Legacy Reporter: John Dalbec <jpdalbec>
Component: xscreensaverAssignee: Fedora Legacy Bugs <bugs>
Status: CLOSED WONTFIX QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: rhl7.3   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://www.jwz.org/xscreensaver/changelog.html
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-30 19:57:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description John Dalbec 2006-04-18 13:01:44 UTC
Description of problem:

06.15.25 CVE: CVE-2004-2655
Platform: Cross Platform
Title: XScreenSaver Local Password Disclosure
Description: XScreenSaver is a  screen saver application. It is
vulnerable to a local password disclosure issue due to failing to
properly grab the keyboard of the local user while it locks the
display. XScreenSaver version 4.18 resolves this issue.
Ref: http://www.jwz.org/xscreensaver/changelog.html

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Jesse Keating 2007-08-30 19:57:27 UTC
Fedora Legacy project has ended.  These will not be fixed by Fedora Legacy.