NVD

Id
65969  
Name
CVE-2005-0205  
Description
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-0205  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343684 65969 CVE-2005-0205 CLA-2005:934  View
343685 65969 CVE-2005-0205 oval:org.mitre.oval:def:9596  View
343686 65969 CVE-2005-0205 DSA-692  View
343687 65969 CVE-2005-0205 20050228 KPPP Privileged File Descriptor Leak Vulnerability  View
343688 65969 CVE-2005-0205 http://www.kde.org/info/security/advisory-20050228-1.txt  View
343689 65969 CVE-2005-0205 RHSA-2005:175  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61951 JVNDB-2005-000153 KDE の kppp における /etc/hosts および /etc/resolv.conf の情報を改ざん可能な脆弱性 KDE に同梱されている kppp には、DNS による名前解決で使用されるファイル /etc/hosts および /etc/resolv.conf を読み書きできてしまう脆弱性が存在します。 CVE-2005-0205 11409 CVE-2005-0205 65969 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000153.html 2005-02-28 2007-04-01 View