Lucene search
HistorySep 06, 2006 - 8:04 p.m.
CVE-2006-3742
cve-2006-3742
kde
pam
configuration
fedora core 5
password caching
login vulnerability
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.
Affected configurations
Node
kdekdebaseMatch3.5.4_0.4.fc5
| CPE | Name | Operator | Version |
|---|---|---|---|
| kde:kdebase | kde kdebase | eq | 3.5.4_0.4.fc5 |
References
Related
nvd
nvd
CVE-2006-3742
2006-09-06 20:04:00
nessus
nessus
Fedora Core 5 : kdebase-3.5.4-0.4.fc5 (2006-942)
2007-01-17 00:00:00
redhatcve
redhatcve
CVE-2006-3742
2015-10-30 09:51:36
cvelist
cvelist
CVE-2006-3742
2006-09-06 20:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
Related for CVE-2006-3742