CVE-1999-1267: Medium severity KDE kde vulnerability
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
KDE Kde Beta 3from your environment.Uninstall KDE Kde Beta 3 or remove the kfm component if the file manager is not required.
- Configuration
Disable kfm's TCP server (the file-operation TCP listener) so kfm does not accept remote copy commands; restart the KDE session or kfm after changing configuration.
KDE file manager (kfm) TCP server = disabled - Compensating control
Block or restrict network access to kfm's TCP server using host-based firewalls, network ACLs, or edge firewall rules to prevent remote hosts from reaching the kfm listener.
- Operational
Stop any running kfm TCP server process or the kfm service and avoid running the file manager on systems exposed to untrusted networks until an official fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1267?
CVE-1999-1267 is considered a critical vulnerability due to its ability to allow remote attackers to modify arbitrary files.
How do I fix CVE-1999-1267?
To fix CVE-1999-1267, users should update to the latest version of the KDE file manager that addresses this vulnerability.
Who is affected by CVE-1999-1267?
CVE-1999-1267 affects all versions of the KDE file manager that use the TCP server for file operations.
What attacks does CVE-1999-1267 enable?
CVE-1999-1267 enables remote attackers to execute unauthorized file modifications on systems running vulnerable versions of the KDE file manager.
When was CVE-1999-1267 disclosed?
CVE-1999-1267 was disclosed in 1999, highlighting a significant security risk present in early versions of KDE.