CVE-2006-2449
Fixed in a distro release EPSS <1%
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
Products: kde
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | kdebase | 4:3.3.2-1sarge3 |
| Red Hat Enterprise Linux 4 | kdebase | 6:3.3.1-5.12 |
| Red Hat Enterprise Linux 4 | kdebase-debuginfo | 6:3.3.1-5.12 |
| Red Hat Enterprise Linux 4 | kdebase-devel | 6:3.3.1-5.12 |