NVD

Id
56689  
Name
CVE-2007-4569  
Description
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-21  
Modified Date
2011-03-07  
Seq
2007-4569  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288918 56689 CVE-2007-4569 SUSE-SR:2007:021  View
288919 56689 CVE-2007-4569 oval:org.mitre.oval:def:10359  View
288920 56689 CVE-2007-4569 GLSA-200710-15  View
288921 56689 CVE-2007-4569 1018724  View
288922 56689 CVE-2007-4569 DSA-1376  View
288923 56689 CVE-2007-4569 http://www.kde.org/info/security/advisory-20070919-1.txt  View
288924 56689 CVE-2007-4569 MDKSA-2007:190  View
288925 56689 CVE-2007-4569 RHSA-2007:0905  View
288926 56689 CVE-2007-4569 25730  View
288927 56689 CVE-2007-4569 USN-517-1  View
288928 56689 CVE-2007-4569 ADV-2007-3227  View
288929 56689 CVE-2007-4569 kde-kdm-login-security-bypass(36711)  View
288930 56689 CVE-2007-4569 https://issues.rpath.com/browse/RPL-1725  View
288931 56689 CVE-2007-4569 FEDORA-2007-2361  View
288932 56689 CVE-2007-4569 FEDORA-2007-716  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52091 JVNDB-2007-000754 KDE における KDM の backend/session.c における認証回避の脆弱性 KDE の KDM には、backend/session.c において、自動ログインの「シャットダウン時のパスワード要求」を有効にされている際に、パスワード認証を回避され、任意のアカウントでログインされる脆弱性が存在します。 CVE-2007-4569 27924 CVE-2007-4569 56689 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000754.html 2007-09-19 2007-12-21 View