SUSE-SA:2006:039: kdebase3-kdm

High Nessus Plugin ID 24419


The remote host is missing a vendor-supplied security patch


The remote host is missing the patch for the advisory SUSE-SA:2006:039 (kdebase3-kdm).

The KDE Display Manager KDM stores the type of the previously used session in the user's home directory.

By using a symlink a local attacker could trick kdm into also storing content of files that are normally not accessible by users, like for instance /etc/shadow.

This problem is tracked by Mitre CVE ID CVE-2006-2449 and was found by Ludwig Nussel of the SUSE Security Team.


Plugin Details

Severity: High

ID: 24419

File Name: suse_SA_2006_039.nasl

Version: $Revision: 1.5 $

Agent: unix

Published: 2007/02/18

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

Required KB Items: Host/SuSE/rpm-list