CVE-2010-0436

Related Files

Gentoo Linux Security Advisory 201412-08

Posted Dec 12, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201412-8 - This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2011. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution.

tags | advisory, remote, local, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2006-3005, CVE-2007-2741, CVE-2008-0553, CVE-2008-1382, CVE-2008-5907, CVE-2008-6218, CVE-2008-6661, CVE-2009-0040, CVE-2009-0360, CVE-2009-0361, CVE-2009-0946, CVE-2009-2042, CVE-2009-2624, CVE-2009-3736, CVE-2009-4029, CVE-2009-4411, CVE-2009-4896, CVE-2010-0001, CVE-2010-0436, CVE-2010-0732, CVE-2010-0829, CVE-2010-1000, CVE-2010-1205, CVE-2010-1511, CVE-2010-2056, CVE-2010-2060, CVE-2010-2192, CVE-2010-2251

SHA-256 | a863e2eb03f0ac1937834e096aa9a52158ef6e9eb8144f3d6df45b14d4002a27

Download | Favorite | View

KDE TOCTOU Vulnerability Case Study

Posted Nov 4, 2013

Authored by x90c

This write up is an in-depth analysis of the CVE-2010-0436 KDE TOCTTOU vulnerability.

tags | paper

advisories | CVE-2010-0436

SHA-256 | 38416e656eed90eb727e8283a9b7f15d42bbf88b4930302e3793941e698ff9c6

Download | Favorite | View

Ubuntu Security Notice 932-1

Posted Apr 20, 2010

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 932-1 - Sebastian Krahmer discovered a race condition in the KDE Display Manager (KDM). A local attacker could exploit this to change the permissions on arbitrary files, thus allowing privilege escalation.

tags | advisory, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2010-0436

SHA-256 | 4372a4aff4c5766652268cb33f145075be19e371399eba24f8aed1555bfe6f26

Download | Favorite | View

Debian Linux Security Advisory 2037-1

Posted Apr 19, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2037-1 - Sebastian Krahmer discovered that a race condition in the KDE Desktop Environment's KDM display manager, allow a local user to elevate privileges to root.

tags | advisory, local, root

systems | linux, debian

advisories | CVE-2010-0436

SHA-256 | 8cf38d43fdd1f0056423f6c0cc6d82bbabab5c5409e7f8a3ed1aed7b3d2dc866

Download | Favorite | View

Mandriva Linux Security Advisory 2010-074

Posted Apr 16, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-074 - A vulnerability has been found and corrected in kdm. KDM contains a race condition that allows local attackers to make arbitrary files on the system world-writeable. This can happen while KDM tries to create its control socket during user login. This vulnerability has been discovered by Sebastian Krahmer from the SUSE Security Team. It is advised to reboot the computer after applying the updated packages in order to the security fix to take full effect. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct this issue.

tags | advisory, arbitrary, local

systems | linux, suse, mandriva

advisories | CVE-2010-0436

SHA-256 | 6e44ca1184ea3d7240884fb255869f8532643ab9fbb175bc2751a3c59775512e

Download | Favorite | View