CVE-2006-2449
4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:C/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.8%
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
Affected configurations
References
secunia.com/advisories/20602
secunia.com/advisories/20660
secunia.com/advisories/20674
secunia.com/advisories/20702
secunia.com/advisories/20785
secunia.com/advisories/20869
secunia.com/advisories/20890
secunia.com/advisories/21662
securitytracker.com/id?1016297
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.444467
www.debian.org/security/2006/dsa-1156
www.gentoo.org/security/en/glsa/glsa-200606-23.xml
www.kde.org/info/security/advisory-20060614-1.txt
www.mandriva.com/security/advisories?name=MDKSA-2006:105
www.mandriva.com/security/advisories?name=MDKSA-2006:106
www.novell.com/linux/security/advisories/2006_39_kdm.html
www.osvdb.org/26511
www.redhat.com/support/errata/RHSA-2006-0548.html
www.securityfocus.com/archive/1/437133/100/0/threaded
www.securityfocus.com/archive/1/437322/100/0/threaded
www.securityfocus.com/bid/18431
www.vupen.com/english/advisories/2006/2355
exchange.xforce.ibmcloud.com/vulnerabilities/27181
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9844
usn.ubuntu.com/301-1/
Related
4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:C/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.8%