Lucene search

K
redhatcveRedhat.comRH:CVE-2006-3742
HistoryOct 30, 2015 - 9:51 a.m.

CVE-2006-3742

2015-10-3009:51:36
redhat.com
access.redhat.com
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.1%

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.1%

Related for RH:CVE-2006-3742