PT-2006-4604 · Kde · Kde Pam

Published 2006-09-06 · Updated 2008-09-05 · CVE-2006-3742

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions KDE PAM configuration version (affected versions not specified)

Description The issue is related to the KDE PAM configuration, which causes KDM passwords to be cached. This allows attackers to login without a password by attempting to log in multiple times.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3742

Affected Products

Kde Pam

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-3742 · Security Note
• http://lwn.net/Alerts/197302 · Patch, Vendor Advisory