CVE-2008-1671
Fixed in a distro release EPSS <1%
start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes.
Products: kde
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | kdelibs | 4:3.5.5a.dfsg.1-8etch2 |
| Debian 5.0 | kdelibs | 4:3.5.10.dfsg.1-0lenny2 |