Lucene search

MitreCVE-2004-0690

HistorySep 28, 2004 - 4:00 a.m.

CVE-2004-0690

2004-09-2804:00:00

mitre

web.nvd.nist.gov

cve-2004-0690

dcopserver

kde

symlink attack

unauthorized access

nvd

security

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.9%

JSON

The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.

Affected configurations

Nvd

Node

kdekdeMatch3.2.1

VendorProductVersionCPE
kdekde3.2.1cpe:/o:kde:kde:3.2.1:::

Vendor	Product	Version	CPE
kde	kde	3.2.1	cpe:/o:kde:kde:3.2.1:::

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864

marc.info/?l=bugtraq&m=109225538901170&w=2

secunia.com/advisories/12276

security.gentoo.org/glsa/glsa-200408-13.xml

www.kb.cert.org/vuls/id/330638

www.kde.org/info/security/advisory-20040811-2.txt

www.mandriva.com/security/advisories?name=MDKSA-2004:086

www.securityfocus.com/bid/10924

exchange.xforce.ibmcloud.com/vulnerabilities/16962

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.9%

JSON

Related for CVE-2004-0690