CVE-2007-4569

Published: Sep 21, 2007Modified: Apr 23, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

Affected (18)

Products: Kde: Kde

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 3.3.0
Kde Kde	Version 3.3.1
Kde Kde	Version 3.3.2
Kde Kde	Version 3.3
Kde Kde	Version 3.4.0
Kde Kde	Version 3.4.1
Kde Kde	Version 3.4.2
Kde Kde	Version 3.4.3
Kde Kde	Version 3.4
Kde Kde	Version 3.5.0
Kde Kde	Version 3.5.1
Kde Kde	Version 3.5.2
Kde Kde	Version 3.5.3
Kde Kde	Version 3.5.4
Kde Kde	Version 3.5.5
Kde Kde	Version 3.5.6
Kde Kde	Version 3.5.7
Kde Kde	Version 3.5

Related CWEs

References (50)

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

Source: secalert@redhat.com

http://secunia.com/advisories/26894

Source: secalert@redhat.com

http://secunia.com/advisories/26904

Source: secalert@redhat.com

http://secunia.com/advisories/26915

Source: secalert@redhat.com

http://secunia.com/advisories/26929

Source: secalert@redhat.com

http://secunia.com/advisories/26977

Source: secalert@redhat.com

http://secunia.com/advisories/27089

Source: secalert@redhat.com

http://secunia.com/advisories/27096

Source: secalert@redhat.com

http://secunia.com/advisories/27106

Source: secalert@redhat.com

http://secunia.com/advisories/27180

Source: secalert@redhat.com

http://secunia.com/advisories/27271

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200710-15.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1018724

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1376

Source: secalert@redhat.com

http://www.kde.org/info/security/advisory-20070919-1.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:190

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0905.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25730

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-517-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3227

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/36711

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1725

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10359

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00084.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26894

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26904

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26915

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26929

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26977

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27089

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27096

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27106

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27180

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27271

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200710-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1018724

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1376

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kde.org/info/security/advisory-20070919-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:190

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0905.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25730

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/usn-517-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3227

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/36711

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1725

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10359

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00084.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.