CVE Vulnerabilities

CVE-2008-1671

Published: Apr 28, 2008 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via user-influenceable input (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes.

Affected Software

Name Vendor Start Version End Version
Kde Kde 3.5.5 (including) 3.5.5 (including)
Kde Kde 3.5.6 (including) 3.5.6 (including)
Kde Kde 3.5.7 (including) 3.5.7 (including)
Kde Kde 3.5.8 (including) 3.5.8 (including)
Kde Kde 3.5.9 (including) 3.5.9 (including)
Kdelibs Ubuntu devel *
Kdelibs Ubuntu feisty *
Kdelibs Ubuntu gutsy *
Kdelibs Ubuntu hardy *

References