CVE-2006-3742

Published: Sep 6, 2006Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.

Affected (1)

Products: Kde: Kdebase

Kde

1 product

Kdebase

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kde Kdebase	Version 3.5.4_0.4.fc5

References (2)

http://lwn.net/Alerts/197302/

Source: secalert@redhat.com

Patch

http://lwn.net/Alerts/197302/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.