CVE-2007-4569

2007-09-2119:17:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

74.3%

JSON

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and “shutdown with password” is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

Affected configurations

Nvd

Node

kdekdeMatch3.3

kdekdeMatch3.3.0

kdekdeMatch3.3.1

kdekdeMatch3.3.2

kdekdeMatch3.4

kdekdeMatch3.4.0

kdekdeMatch3.4.1

kdekdeMatch3.4.2

kdekdeMatch3.4.3

kdekdeMatch3.5

kdekdeMatch3.5.0

kdekdeMatch3.5.1

kdekdeMatch3.5.2

kdekdeMatch3.5.3

kdekdeMatch3.5.4

kdekdeMatch3.5.5

kdekdeMatch3.5.6

kdekdeMatch3.5.7

VendorProductVersionCPE
kdekde3.3cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*
kdekde3.3.0cpe:2.3:o:kde:kde:3.3.0:*:*:*:*:*:*:*
kdekde3.3.1cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*
kdekde3.3.2cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*
kdekde3.4cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*
kdekde3.4.0cpe:2.3:o:kde:kde:3.4.0:*:*:*:*:*:*:*
kdekde3.4.1cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*
kdekde3.4.2cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*
kdekde3.4.3cpe:2.3:o:kde:kde:3.4.3:*:*:*:*:*:*:*
kdekde3.5cpe:2.3:o:kde:kde:3.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kde	kde	3.3	cpe:2.3:o:kde:kde:3.3:::::::*
kde	kde	3.3.0	cpe:2.3:o:kde:kde:3.3.0:::::::*
kde	kde	3.3.1	cpe:2.3:o:kde:kde:3.3.1:::::::*
kde	kde	3.3.2	cpe:2.3:o:kde:kde:3.3.2:::::::*
kde	kde	3.4	cpe:2.3:o:kde:kde:3.4:::::::*
kde	kde	3.4.0	cpe:2.3:o:kde:kde:3.4.0:::::::*
kde	kde	3.4.1	cpe:2.3:o:kde:kde:3.4.1:::::::*
kde	kde	3.4.2	cpe:2.3:o:kde:kde:3.4.2:::::::*
kde	kde	3.4.3	cpe:2.3:o:kde:kde:3.4.3:::::::*
kde	kde	3.5	cpe:2.3:o:kde:kde:3.5:::::::*