CVE-2005-2494

2005-09-0623:03:00

[email protected]

web.nvd.nist.gov

cve-2005-2494

kcheckpass

kde

symlink attack

root access

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.

Affected configurations

NVD

Node

kdekdeMatch3.2.0

kdekdeMatch3.2.1

kdekdeMatch3.2.2

kdekdeMatch3.2.3

kdekdeMatch3.3.0

kdekdeMatch3.3.1

kdekdeMatch3.3.2

kdekdeMatch3.4.0

kdekdeMatch3.4.1

kdekdeMatch3.4.2

CPENameOperatorVersion
kde:kdekdeeq3.2.0
kde:kdekdeeq3.2.1
kde:kdekdeeq3.2.2
kde:kdekdeeq3.2.3
kde:kdekdeeq3.3.0
kde:kdekdeeq3.3.1
kde:kdekdeeq3.3.2
kde:kdekdeeq3.4.0
kde:kdekdeeq3.4.1
kde:kdekdeeq3.4.2

CPE	Name	Operator	Version
kde:kde	kde	eq	3.2.0
kde:kde	kde	eq	3.2.1
kde:kde	kde	eq	3.2.2
kde:kde	kde	eq	3.2.3
kde:kde	kde	eq	3.3.0
kde:kde	kde	eq	3.3.1
kde:kde	kde	eq	3.3.2
kde:kde	kde	eq	3.4.0
kde:kde	kde	eq	3.4.1
kde:kde	kde	eq	3.4.2