CVE-2010-0436

2010-04-1517:30:00

CWE-362

[email protected]

web.nvd.nist.gov

cve-2010-0436

kdm

kde software compilation

race condition

file permissions

local users

privileges

8.9 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.

CPENameOperatorVersion
kde:kde_sckde kde sceq4.4.1
kde:kde_sckde kde sceq4.2.2
kde:kde_sckde kde sceq4.4.2
kde:kde_sckde kde sceq2.2.0
kde:kde_sckde kde sceq4.1.2
kde:kde_sckde kde sceq4.4.0
kde:kde_sckde kde sceq4.3.5
kde:kde_sckde kde sceq4.3.0
kde:kde_sckde kde sceq4.3.1
kde:kde_sckde kde sceq4.3.4

CPE	Name	Operator	Version
kde:kde_sc	kde kde sc	eq	4.4.1
kde:kde_sc	kde kde sc	eq	4.2.2
kde:kde_sc	kde kde sc	eq	4.4.2
kde:kde_sc	kde kde sc	eq	2.2.0
kde:kde_sc	kde kde sc	eq	4.1.2
kde:kde_sc	kde kde sc	eq	4.4.0
kde:kde_sc	kde kde sc	eq	4.3.5
kde:kde_sc	kde kde sc	eq	4.3.0
kde:kde_sc	kde kde sc	eq	4.3.1
kde:kde_sc	kde kde sc	eq	4.3.4