CVE

Id
11411  
CVE No.
CVE-2005-0205  
Status
Candidate  
Description
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.  
Phase
Assigned (20050201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81228 11411 CVE-2005-0205 IDEFENSE:20050228 KPPP Privileged File Descriptor Leak Vulnerability  View
81229 11411 CVE-2005-0205 URL:http://www.idefense.com/application/poi/display?id=208&type=vulnerabilities  View
81230 11411 CVE-2005-0205 CONFIRM:http://www.kde.org/info/security/advisory-20050228-1.txt  View
81231 11411 CVE-2005-0205 CONECTIVA:CLA-2005:934  View
81232 11411 CVE-2005-0205 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934  View
81233 11411 CVE-2005-0205 DEBIAN:DSA-692  View
81234 11411 CVE-2005-0205 URL:http://www.debian.org/security/2005/dsa-692  View
81235 11411 CVE-2005-0205 REDHAT:RHSA-2005:175  View
81236 11411 CVE-2005-0205 URL:http://www.redhat.com/support/errata/RHSA-2005-175.html  View
81237 11411 CVE-2005-0205 OVAL:oval:org.mitre.oval:def:9596  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62067 JVNDB-2005-000269 Linux Kernel の NFS クライアントにおけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2005-0207 11411 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000269.html  View