Description
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
References
- CLA-2004:864 vendor-advisory
- kde-dcopserver-symlink(16962) vdb-entry
- 12276 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386
- MDKSA-2004:086 vendor-advisory
- http://www.kde.org/info/security/advisory-20040811-2.txt
- VU#330638 third-party-advisory
- 10924 vdb-entry
- 200408-13 vendor-advisory
- 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities mailing-list