|
KDE Desktop Communication Protocol Denial of Service Vulnerability
|
|
Secunia Advisory:
|
SA14591
|
|
|
Release Date:
|
2005-03-16
|
|
Popularity:
|
8,819 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
DoS
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | KDE 3.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-0396
|
|
Description:
Sebastian Krahmer has reported a vulnerability in KDE, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
The vulnerability is caused due to an error in the authentication process in the DCOP (Desktop Communication Protocol) daemon dcopserver. This can be exploited to lock the dcopserver for arbitrary local users.
Successful exploitation may result in decreased desktop functionality for the affected user.
The vulnerability has been reported in versions prior to 3.4.
Solution:
Upgrade to KDE 3.4 or apply patch.
Patch for KDE 3.1.x:
ftp://ftp.kde.org/pub/kde/security_patches/post-3.1.5-kdelibs-dcop.patch
377c49d8224612fbf09f70f3c09d52f5
Patch for KDE 3.2.x:
ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-dcop.patch
0948701bffb082c65784dc8a2b648ef0
Patch for KDE 3.3.x:
ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdelibs-dcop.patch
7309e259ae1f29be08bbb70e580da3fb
Provided and/or discovered by:
Sebastian Krahmer, SUSE LINUX Security Team.
Original Advisory:
http://www.kde.org/info/security/advisory-20050316-1.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
