The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue.

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue.

This build includes * a couple of small powerdevil patches (see kde bugs 221637, 221637), * fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one, * initial attempts at kdm/plymouth integration, * upstream kdm security fix for CVE-2010-0436

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update set updates the KDE Software Compilation (KDE SC) to KDE SC 4.4.2, which has a number of improvements: * Possible crashes in Plasma, Dolphin and Okular have been fixed * The Microblog applet now shows the correct time in the timeline * The audioplayer KRunner plugin has been fixed to not freeze the KRunner UI anymore and more bugfixes and translation updates. See http://kde.org/announcements/announce-4.4.2.php for more information.
* a couple of small powerdevil patches (see kde bugs 221637, 221637),
* upstream kdm security fix for CVE-2010-0436 Also included are the bugfix releases SIP 4.10.1:
http://www.riverbankcomputing.co.uk/static/Downloads/sip4/ChangeLog and PyQt4 4.7.2:
http://www.riverbankcomputing.co.uk/static/Downloads/PyQt4/ChangeLog

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update set updates the KDE Software Compilation (KDE SC) to KDE SC 4.4.3, which has a number of improvements: * Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management * Flash plugin support in KHTML has been enhanced to work with newest Youtube skins * Case-sensitivity in renaming fixes in KIO, KDE's network-transparent I/O library

  - Hiding the mouse cursor in some special cases in     presentation mode and two possible crashers have been     fixed and more bugfixes and translation updates. See     http://kde.org/announcements/announce-4.4.3.php for more     information. In addition, the security issues     CVE-2010-1000 and CVE-2010-1511 (improper sanitization     of metalink attribute for downloading files) in KGet     have been fixed, and Kppp now prompts for the root     password instead of failing with a cryptic error when     run as a regular user.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

KDE Security Advisory reports :

KDM contains a race condition that allows local attackers to make arbitrary files on the system world-writeable. This can happen while KDM tries to create its control socket during user login. A local attacker with a valid local account can under certain circumstances make use of this vulnerability to execute arbitrary code as root.

A vulnerability has been found and corrected in kdm (kdebase/kdebase4-workspace) :

KDM contains a race condition that allows local attackers to make arbitrary files on the system world-writeable. This can happen while KDM tries to create its control socket during user login. This vulnerability has been discovered by Sebastian Krahmer from the SUSE Security Team (CVE-2010-0436).

It is adviced to reboot the computer after applying the updated packages in order to the security fix to take full effect.

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.

The updated packages have been patched to correct this issue.

A privilege escalation flaw was found in the KDE Display Manager (KDM). A local user with console access could trigger a race condition, possibly resulting in the permissions of an arbitrary file being set to world-writable, allowing privilege escalation.
(CVE-2010-0436)

The system should be rebooted for this update to take effect. After the reboot, administrators should manually remove all leftover user-owned dmctl-* directories in '/var/run/xdmctl/'.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
45533	openSUSE Security Update : kde4-kdm (kde4-kdm-2134)	Nessus	SuSE Local Security Checks	2010/4/15	2021/1/14	medium
45539	SuSE 10 Security Update : kdm (ZYPP Patch Number 6942)	Nessus	SuSE Local Security Checks	2010/4/15	2021/1/14	medium
47440	Fedora 13 : kdebase-workspace-4.4.2-5.fc13 (2010-6605)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
47415	Fedora 12 : PyQt4-4.7.2-2.fc12 / kdeaccessibility-4.4.2-1.fc12 / kdeadmin-4.4.2-1.fc12 / etc (2010-6096)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
47498	Fedora 12 : kde-l10n-4.4.3-1.fc12 / kdeaccessibility-4.4.3-1.fc12.1 / kdeadmin-4.4.3-1.fc12.1 / etc (2010-8544)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
45529	FreeBSD : KDM -- local privilege escalation vulnerability (3987c5d1-47a9-11df-a0d5-0016d32f24fb)	Nessus	FreeBSD Local Security Checks	2010/4/15	2021/1/6	medium
45548	Mandriva Linux Security Advisory : kdebase (MDVSA-2010:074)	Nessus	Mandriva Local Security Checks	2010/4/16	2021/1/6	medium
60781	Scientific Linux Security Update : kdebase on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

medium