CVE-2004-2655: rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly oth...

Security readout for executives and security teams

This issue can expose a user’s unlock password when rdesktop and xscreensaver interact incorrectly. Instead of the screen unlock receiving the password safely, keystrokes may remain focused on the active remote desktop window. The main business risk is accidental credential disclosure from affected Linux workstation setups, not broad remote compromise. Exposure is most likely on Linux desktops using rdesktop with xscreensaver, especially Fedora-like environments noted by the CVE. Systems without that desktop workflow are unlikely to be affected. The source bundle’s affected-product metadata is incomplete. Prioritize remediation where administrators or privileged users use Linux workstations with rdesktop and xscreensaver. This is not evidenced as internet-scale exploitation, but credential exposure from a single workstation can create follow-on business risk. Mitigation focus: Review vendor advisories for distribution-specific fixed packages or guidance.; Update rdesktop, xscreensaver, and related desktop packages through supported vendor channels.; Avoid affected rdesktop/xscreensaver combinations where vendor guidance confirms risk..

Prepared

Jun 29, 2026, 13:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.