CVE-2010-0436

2010-04-1517:30:00

CWE-362

redhat

web.nvd.nist.gov

cve-2010-0436

kdm

kde software compilation

race condition

file permissions

local users

privileges

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.9

Confidence

High

EPSS

Percentile

10.1%

JSON

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.

Affected configurations

Nvd

Node

kdekde_scMatch2.2.0

kdekde_scMatch3.5.10

kdekde_scMatch4.1.2

kdekde_scMatch4.2.2

kdekde_scMatch4.3.0

kdekde_scMatch4.3.1

kdekde_scMatch4.3.4

kdekde_scMatch4.3.5

kdekde_scMatch4.4.0

kdekde_scMatch4.4.1

kdekde_scMatch4.4.2

VendorProductVersionCPE
kdekde_sc2.2.0cpe:2.3:a:kde:kde_sc:2.2.0:*:*:*:*:*:*:*
kdekde_sc3.5.10cpe:2.3:a:kde:kde_sc:3.5.10:*:*:*:*:*:*:*
kdekde_sc4.1.2cpe:2.3:a:kde:kde_sc:4.1.2:*:*:*:*:*:*:*
kdekde_sc4.2.2cpe:2.3:a:kde:kde_sc:4.2.2:*:*:*:*:*:*:*
kdekde_sc4.3.0cpe:2.3:a:kde:kde_sc:4.3.0:*:*:*:*:*:*:*
kdekde_sc4.3.1cpe:2.3:a:kde:kde_sc:4.3.1:*:*:*:*:*:*:*
kdekde_sc4.3.4cpe:2.3:a:kde:kde_sc:4.3.4:*:*:*:*:*:*:*
kdekde_sc4.3.5cpe:2.3:a:kde:kde_sc:4.3.5:*:*:*:*:*:*:*
kdekde_sc4.4.0cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*
kdekde_sc4.4.1cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kde	kde_sc	2.2.0	cpe:2.3:a:kde:kde_sc:2.2.0:::::::*
kde	kde_sc	3.5.10	cpe:2.3:a:kde:kde_sc:3.5.10:::::::*
kde	kde_sc	4.1.2	cpe:2.3:a:kde:kde_sc:4.1.2:::::::*
kde	kde_sc	4.2.2	cpe:2.3:a:kde:kde_sc:4.2.2:::::::*
kde	kde_sc	4.3.0	cpe:2.3:a:kde:kde_sc:4.3.0:::::::*
kde	kde_sc	4.3.1	cpe:2.3:a:kde:kde_sc:4.3.1:::::::*
kde	kde_sc	4.3.4	cpe:2.3:a:kde:kde_sc:4.3.4:::::::*
kde	kde_sc	4.3.5	cpe:2.3:a:kde:kde_sc:4.3.5:::::::*
kde	kde_sc	4.4.0	cpe:2.3:a:kde:kde_sc:4.4.0:::::::*
kde	kde_sc	4.4.1	cpe:2.3:a:kde:kde_sc:4.4.1:::::::*