Lucene search

K
ubuntuUbuntuUSN-608-1
HistoryMay 06, 2008 - 12:00 a.m.

KDE vulnerability

2008-05-0600:00:00
ubuntu.com
36

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0

Percentile

10.1%

Releases

  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 7.04

Packages

  • kdelibs -

Details

It was discovered that start_kdeinit in KDE 3 did not properly sanitize
its input. A local attacker could exploit this to send signals to other
processes and cause a denial of service or possibly execute arbitrary
code. (CVE-2008-1671)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchkdelibs4c2a<Β 4:3.5.9-0ubuntu7.1UNKNOWN
Ubuntu8.04noarchkdelibs-dbg<Β 4:3.5.9-0ubuntu7.1UNKNOWN
Ubuntu8.04noarchkdelibs4-dev<Β 4:3.5.9-0ubuntu7.1UNKNOWN
Ubuntu7.10noarchkdelibs4c2a<Β 4:3.5.8-0ubuntu3.4UNKNOWN
Ubuntu7.10noarchkdelibs-dbg<Β 4:3.5.8-0ubuntu3.4UNKNOWN
Ubuntu7.10noarchkdelibs4-dev<Β 4:3.5.8-0ubuntu3.4UNKNOWN
Ubuntu7.04noarchkdelibs4c2a<Β 4:3.5.6-0ubuntu14.3UNKNOWN
Ubuntu7.04noarchkdelibs-dbg<Β 4:3.5.6-0ubuntu14.3UNKNOWN
Ubuntu7.04noarchkdelibs4-dev<Β 4:3.5.6-0ubuntu14.3UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0

Percentile

10.1%