OSVDB ID: 10729

Title: KDocker Permission Checking Issue

Info

Disclosure

Oct 14, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

KDocker contains a flaw related to the execution of files that may allow an attacker, authenticated to the X session, to send X client messages and have KDocker execute programs not owned by the owner of the KDocker process. No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Authentication Management
Impact: Loss of Confidentiality
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade to version 0.9 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

KDocker

KDocker

0.8

References

Credit

  • Girish Ramakrishnan - cs19713Brand New Doo Doousers.sourceforge.net -


Direct URL: http://osvdb.org/36218