NVD

Id
61148  
Name
CVE-2006-2449  
Description
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-06-15  
Modified Date
2011-03-07  
Seq
2006-2449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315994 61148 CVE-2006-2449 oval:org.mitre.oval:def:9844  View
315995 61148 CVE-2006-2449 1016297  View
315996 61148 CVE-2006-2449 SSA:2006-178-01  View
315997 61148 CVE-2006-2449 DSA-1156  View
315998 61148 CVE-2006-2449 GLSA-200606-23  View
315999 61148 CVE-2006-2449 http://www.kde.org/info/security/advisory-20060614-1.txt  View
316000 61148 CVE-2006-2449 MDKSA-2006:105  View
316001 61148 CVE-2006-2449 MDKSA-2006:106  View
316002 61148 CVE-2006-2449 SUSE-SA:2006:039  View
316003 61148 CVE-2006-2449 RHSA-2006:0548  View
316004 61148 CVE-2006-2449 20060614 [KDE Security Advisory] KDM symlink attack vulnerability  View
316005 61148 CVE-2006-2449 20060615 rPSA-2006-0106-1 kdebase  View
316006 61148 CVE-2006-2449 18431  View
316007 61148 CVE-2006-2449 USN-301-1  View
316008 61148 CVE-2006-2449 ADV-2006-2355  View
316009 61148 CVE-2006-2449 kde-kdm-symlink(27181)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58152 JVNDB-2006-000348 KDE Display Manager (KDM) の設定ファイルの処理におけるシンボリックリンク攻撃を受ける脆弱性 KDM において、ユーザのホームディレクトリに保存された設定ファイルの処理が不適切であるため、シンボリックリンク攻撃が可能となる脆弱性が存在します。 CVE-2006-2449 18551 CVE-2006-2449 61148 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000348.html 2006-06-14 2007-04-01 View