5

CVE-2005-2101

langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
KdeKde Version3.0
KdeKde Version3.0.1
KdeKde Version3.0.2
KdeKde Version3.0.3
KdeKde Version3.0.4
KdeKde Version3.0.5
KdeKde Version3.0.5a
KdeKde Version3.1
KdeKde Version3.1.1
KdeKde Version3.1.2
KdeKde Version3.1.3
KdeKde Version3.1.4
KdeKde Version3.1.5
KdeKde Version3.1_alpha1
KdeKde Version3.1_beta1
KdeKde Version3.1_beta2
KdeKde Version3.2
KdeKde Version3.2.0_beta1
KdeKde Version3.2.1
KdeKde Version3.2.2
KdeKde Version3.2.3
KdeKde Version3.3
KdeKde Version3.3.1
KdeKde Version3.3.2
KdeKde Version3.4
KdeKde Version3.4.1
KdeKde Version3.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.27% 0.66
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/16428
http://securitytracker.com/id?1014675
http://www.debian.org/security/2005/dsa-818
http://www.kde.org/info/security/advisory-20050815-1.txt
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:159
http://www.securityfocus.com/bid/14561