... ::: May The source Be with You ::: ... ~ Articles ~ Vulnerability ~ 97

[Guest@unixcoder.org]~ ... ::: May The source Be with You ::: ... ~ Articles ~ Vulnerability ~ 97

Main Menu

Google Search

Latest Links

More Info

Home : Articles : Vulnerability

Vulnerability KDE PAM Fedora Core 5

Published on 09/07/06 at 03:32:34 PST by Root

Vulnerability Summary CVE-2006-3742

Original release date: 9/6/2006
Last revised: 9/6/2006
Source: US-CERT/NIST

Overview

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.

Impact

CVSS Severity: 10.0 (High)
Range: Remotely exploitable , Locally exploitable
Authentication: Not required to exploit
Impact Type: Provides administrator access

References to Advisories, Solutions, and Tools

External Source: FEDORA (disclaimer)

Name: FEDORA-2006-942

Hyperlink: http://lwn.net/Alerts/197302/

Vulnerable software and versions

KDE, kdebase, 3.5.4-0.4.fc5

Technical Details

CVSS Base Score Vector: (AV:R/AC:L/Au:NR/C:C/I:C/A:C/B:N) (legend)

Vulnerability Type: Access Validation Error , Design Error

CVE Standard Vulnerability Entry:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3742

~ Utore Security Center

Printer Friendly version - Vulnerability KDE PAM Fedora Core 5

(235 reads)

All Articles by Root

Comments on this article:

Vulnerability KDE PAM Fedora Core 5 | 0 comments | Sign Up

The comments are owned by the poster. We aren't responsible for its content.
Only registered members may comment on articles.

No comments so far.

About

Contact

Help

Recommend

This web site was made with UtoreAPP v0.0.1 , a web portal system written in Perl
All Comments, trademarks and copyrights on this page are owned by UnixCoder.org.