CVE-2005-2494

nvd nist

Published: Sep 6, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.

Affected (10)

Products: Kde: Kde

Kde

1 product

Kde

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 3.2.0
Kde Kde	Version 3.2.1
Kde Kde	Version 3.2.2
Kde Kde	Version 3.2.3
Kde Kde	Version 3.3.0
Kde Kde	Version 3.3.1
Kde Kde	Version 3.3.2
Kde Kde	Version 3.4.0
Kde Kde	Version 3.4.1
Kde Kde	Version 3.4.2

References (28)

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff (unsafe URL)

Source: secalert@redhat.com

Patch

http://marc.info/?l=bugtraq&m=112603999215453&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=112611555928169&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/16692

Source: secalert@redhat.com

http://secunia.com/advisories/18139

Source: secalert@redhat.com

http://secunia.com/advisories/21481

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-815

Source: secalert@redhat.com

http://www.kde.org/info/security/advisory-20050905-1.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:160

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0582.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14736

Source: secalert@redhat.com

http://www.suresec.org/advisories/adv6.pdf

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-176-1

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9388

Source: secalert@redhat.com

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff (unsafe URL)