CVE-1999-0780: Medium severity FreeBSD FreeBSD vulnerability
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
KDE klockfrom your environment.If klock is not required, uninstall or disable the klock component to eliminate the vulnerability that allows local users to specify arbitrary PIDs via .kss.pid.
- Configuration
Ensure the .kss.pid file is created and maintained with secure ownership and permissions so unprivileged local users cannot write arbitrary PIDs. For example, set ownership to the user that runs klock and restrict permissions (chmod 600 .kss.pid; chown <klock-user>:<group> .kss.pid). Verify any startup scripts create the file with these permissions.
KDE klock .kss.pid file permissions = not writable by other users (e.g., mode 600, owned by the klock user) - Compensating control
Restrict which local users can execute or write to klock-related files (for example with filesystem ACLs, remove execute permission on the klock binary for untrusted users, or place klock in a directory inaccessible to them) until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0780?
CVE-1999-0780 is classified as a local vulnerability that allows users to terminate arbitrary processes.
How do I fix CVE-1999-0780?
To fix CVE-1999-0780, users should update their KDE and relevant packages to versions that do not have this vulnerability.
Who is affected by CVE-1999-0780?
CVE-1999-0780 affects local users on systems running KDE 1.0, FreeBSD 6.2-stable, and Linux Kernel version 2.6.20.1.
What are the implications of exploiting CVE-1999-0780?
Exploiting CVE-1999-0780 can allow malicious users to disrupt system processes, potentially leading to system instability.
Is CVE-1999-0780 still a concern?
While CVE-1999-0780 is an older vulnerability, it may still be relevant for legacy systems using the affected software versions.