// For flags

CVE-2010-0436

kdm privilege escalation flaw

Severity Score

6.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.

Condición de carrera en backend/ctrl.c en KDM en KDE Software Compilation (SC) v2.2.0 hasta v4.4.2 permite a usuarios locales cambiar de ficheros a su elección, y consecuentemente obtener privelegios, bloqueando el borrado de varios directorios que contienen sockets de control, relacionado con la interacción inadecuada con ksm.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Local
Attack Complexity
Low
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-01-27 CVE Reserved
  • 2010-04-15 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
2.2.0
Search vendor "Kde" for product "Kde Sc" and version "2.2.0"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
3.5.10
Search vendor "Kde" for product "Kde Sc" and version "3.5.10"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.1.2
Search vendor "Kde" for product "Kde Sc" and version "4.1.2"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.2.2
Search vendor "Kde" for product "Kde Sc" and version "4.2.2"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.3.0
Search vendor "Kde" for product "Kde Sc" and version "4.3.0"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.3.1
Search vendor "Kde" for product "Kde Sc" and version "4.3.1"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.3.4
Search vendor "Kde" for product "Kde Sc" and version "4.3.4"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.3.5
Search vendor "Kde" for product "Kde Sc" and version "4.3.5"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.4.0
Search vendor "Kde" for product "Kde Sc" and version "4.4.0"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.4.1
Search vendor "Kde" for product "Kde Sc" and version "4.4.1"
-
Affected
Kde
Search vendor "Kde"
Kde Sc
Search vendor "Kde" for product "Kde Sc"
4.4.2
Search vendor "Kde" for product "Kde Sc" and version "4.4.2"
-
Affected