CVE-2004-0689
Fixed in a distro release EPSS <1%
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
Products: kde, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | kdelibs | 4:2.2.2-13.woody.12 |
| Red Hat Enterprise Linux 3 | kdebase | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdebase-debuginfo | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdebase-devel | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdelibs | 6:3.1.3-6.6 |
| Red Hat Enterprise Linux 3 | kdelibs-debuginfo | 6:3.1.3-6.6 |
| Red Hat Enterprise Linux 3 | kdelibs-devel | 6:3.1.3-6.6 |