CVE-2016-3100 kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly....
HighCVSS 8.4
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/kinit(Debian:12) | < 5.23.0-1 | 5.23.0-1 |
| debian/kinit(Debian:13) | < 5.23.0-1 | 5.23.0-1 |
| debian/kinit(Debian:14) | < 5.23.0-1 | 5.23.0-1 |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| kde frameworks | <= 5.22.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-3100 vendor-advisory
- openSUSE-SU-2016:1723 vendor-advisory
- www.kde.com
- 91769 vdb-entry
- bugs.kde.org
- bugs.kde.org
- quickgit.kde.org
- quickgit.kde.org
- www.kde.org
- bugs.debian.org issue-tracking