NetSight
medium6.9

CVE-2010-0436

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, a…

Impact

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.

Affected products

VendorProductAffected versions
KdeKde Sc
Versions 2.2.0, 3.5.10, 4.1.2, 4.2.2, 4.3.0, 4.3.1

Weakness classification

References