CVE

Id
43020  
CVE No.
CVE-2010-0436  
Status
Candidate  
Description
Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469201 43020 CVE-2010-0436 CONFIRM:ftp://ftp.kde.org/pub/kde/security_patches/kdebase-workspace-4.3.5-CVE-2010-0436.diff  View
469202 43020 CVE-2010-0436 CONFIRM:http://www.kde.org/info/security/advisory-20100413-1.txt  View
469203 43020 CVE-2010-0436 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=570613  View
469204 43020 CVE-2010-0436 DEBIAN:DSA-2037  View
469205 43020 CVE-2010-0436 URL:http://www.debian.org/security/2010/dsa-2037  View
469206 43020 CVE-2010-0436 FEDORA:FEDORA-2010-6605  View
469207 43020 CVE-2010-0436 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039533.html  View
469208 43020 CVE-2010-0436 REDHAT:RHSA-2010:0348  View
469209 43020 CVE-2010-0436 URL:http://rhn.redhat.com/errata/RHSA-2010-0348.html  View
469210 43020 CVE-2010-0436 SUSE:SUSE-SR:2010:009  View
469211 43020 CVE-2010-0436 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html  View
469212 43020 CVE-2010-0436 BID:39467  View
469213 43020 CVE-2010-0436 URL:http://www.securityfocus.com/bid/39467  View
469214 43020 CVE-2010-0436 OVAL:oval:org.mitre.oval:def:9999  View
469215 43020 CVE-2010-0436 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9999  View
469216 43020 CVE-2010-0436 SECUNIA:39419  View
469217 43020 CVE-2010-0436 URL:http://secunia.com/advisories/39419  View
469218 43020 CVE-2010-0436 SECUNIA:39481  View
469219 43020 CVE-2010-0436 URL:http://secunia.com/advisories/39481  View
469220 43020 CVE-2010-0436 SECUNIA:39506  View
469221 43020 CVE-2010-0436 URL:http://secunia.com/advisories/39506  View
469222 43020 CVE-2010-0436 VUPEN:ADV-2010-0879  View
469223 43020 CVE-2010-0436 URL:http://www.vupen.com/english/advisories/2010/0879  View
469224 43020 CVE-2010-0436 XF:kde-kdm-privilege-escalation(57823)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35304 JVNDB-2010-001084 Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性 Cisco ASA で使用される Cisco Secure Desktop の +CSCOT+/translation には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-0440 43020 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001084.html  View