KDE kdm race conditions
Published:		19.04.2010
Source:		BUGTRAQ
SecurityVulns ID:		10771
Type:		local
Level:		5/10
Description:		race conditions allow to change file permissions.

Affected:		KDE : KDE 3.5
CVE:		CVE-2010-0436 (Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.)

Original document

MANDRIVA, [ MDVSA-2010:074 ] kdebase (19.04.2010)

Discuss:

Read or add your comments to this news (0 comments)