FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-4569

This CVE name corresponds to:

Entered	Topic
2007-09-19	kdm -- passwordless login vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-4569 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-4569
Phase	Assigned(20070828)

Description

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

References

Source	Reference
CONFIRM	http://www.kde.org/info/security/advisory-20070919-1.txt
CONFIRM	https://issues.rpath.com/browse/RPL-1725
DEBIAN	DSA-1376
FEDORA	FEDORA-2007-2361
FEDORA	FEDORA-2007-716
GENTOO	GLSA-200710-15
MANDRIVA	MDKSA-2007:190
REDHAT	RHSA-2007:0905
SUSE	SUSE-SR:2007:021
UBUNTU	USN-517-1
BID	25730
OVAL	oval:org.mitre.oval:def:10359
VUPEN	ADV-2007-3227
SECTRACK	1018724
SECUNIA	26929
SECUNIA	26894
SECUNIA	26904
SECUNIA	26915
SECUNIA	26977
SECUNIA	27089
SECUNIA	27106
SECUNIA	27096
SECUNIA	27180
SECUNIA	27271
XF	kde-kdm-login-security-bypass(36711)