medium4.6Public exploit code
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SuSE 7.0 - KFM Insecure '.TMP' File Creation2001-04-18 · local · linux · Verified
Impact
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Kde | Version 1.x |
| Suse | Suse Linux | Version 7.0 |