Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0436
HistoryApr 15, 2010 - 12:00 a.m.

CVE-2010-0436

2010-04-1500:00:00
ubuntu.com
ubuntu.com
12

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC)
2.2.0 through 4.4.2 allows local users to change the permissions of
arbitrary files, and consequently gain privileges, by blocking the removal
of a certain directory that contains a control socket, related to improper
interaction with ksm.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchkdebase-workspace< 4:4.1.4-0ubuntu1~intrepid3.2UNKNOWN
ubuntu9.04noarchkdebase-workspace< 4:4.2.2-0ubuntu2.1UNKNOWN
ubuntu9.10noarchkdebase-workspace< 4:4.3.2-0ubuntu7.2UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%