CVE-2008-1671

Related Files

Mandriva Linux Security Advisory 2008-097

Posted May 7, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - A vulnerability was found in start_kdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code. By default, start_kdeinit is not installed setuid root on Mandriva Linux, however updated packages have been patched to correct this issue.

tags | advisory, denial of service, arbitrary, local, root

systems | linux, mandriva

advisories | CVE-2008-1671

SHA-256 | 90328bccffe3f3110bfdc3dc25d2e176105bd89c61a4d863d2c8ea4513d4ec86

Download | Favorite | View

Ubuntu Security Notice 608-1

Posted May 6, 2008

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 608-1 - It was discovered that start_kdeinit in KDE 3 did not properly sanitize its input. A local attacker could exploit this to send signals to other processes and cause a denial of service or possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2008-1671

SHA-256 | 1019497a78fcf0ef12c22f2ac9cfbaffb18b373c464aa09239612487bb00ca6b

Download | Favorite | View

Gentoo Linux Security Advisory 200804-30

Posted Apr 29, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200804-30 - Vulnerabilities have been reported in the processing of user-controlled data by start_kdeinit, which is setuid root by default. Versions less than 4.0 are affected.

tags | advisory, root, vulnerability

systems | linux, gentoo

advisories | CVE-2008-1671

SHA-256 | 36f60f50a17f6397b354773a66f7237fe6ea2acec7db25377a267058e3b4e1bc

Download | Favorite | View