CVE-2005-2494

Description

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdebase-kcheckpass.diff
• http://marc.info/?l=bugtraq&m=112603999215453&w=2
• http://marc.info/?l=bugtraq&m=112611555928169&w=2
• http://secunia.com/advisories/16692
• http://secunia.com/advisories/18139
• http://secunia.com/advisories/21481