Description
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kdelibs | 4:2.2.2-13.woody.12 | DSA-539 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kdebase +1 | 6:3.1.3-5.4 | RHSA-2004:412 |
| RHEL 3 | kdelibs +1 | 6:3.1.3-6.6 | RHSA-2004:412 |
Advisories 2
- RHSA-2004:412 Red Hat Security Advisory: kdelibs, kdebase security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-539 kdelibs - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
References
- oval:org.mitre.oval:def:9334 vdb-entry signature
- CLA-2004:864 vendor-advisory
- 12276 third-party-advisory
- kde-application-symlink(16963) vdb-entry
- DSA-539 vendor-advisory
- 200408-13 vendor-advisory
- 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities mailing-list
- http://www.kde.org/info/security/advisory-20040811-1.txt