PT-2006-4604 · Kde · Kde Pam

Publicado 2006-09-06 · Atualizado 2008-09-05 · CVE-2006-3742

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions KDE PAM configuration version (affected versions not specified)

Description The issue is related to the KDE PAM configuration, which causes KDM passwords to be cached. This allows attackers to login without a password by attempting to log in multiple times.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3742

Produtos afetados

Kde Pam

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-3742 · Nota de Segurança
• http://lwn.net/Alerts/197302 · Correção, Aviso do Fabricante