CVE-1999-1268: High severity KDE kde vulnerability
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
KDE konsolefrom your environment.Uninstall KDE konsole if it is not required on the system to eliminate the attack surface.
- Configuration
Adjust filesystem permissions or udev rules for the terminal/device nodes used by konsole so that only the session owner or root can access them (e.g., change ownership/permissions or add udev rules to set restrictive permissions).
KDE konsole device_access_permissions = restrict to session owner or root - Compensating control
Apply host-level access controls to prevent unprivileged local users from accessing terminal device nodes: enforce least-privilege for local accounts, use local ACLs, and enable Mandatory Access Control (e.g., SELinux/AppArmor) policies to block access to the affected devices.
- Operational
Terminate and require re-authentication for existing console sessions that may have been observed or hijacked; review system logs for unauthorized access to device nodes and investigate impacted accounts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1268?
The severity of CVE-1999-1268 is considered to be high due to the potential for local users to hijack or observe sessions.
How do I fix CVE-1999-1268?
To fix CVE-1999-1268, ensure that access permissions for device files used by KDE konsole are properly configured to restrict unauthorized access.
Who is affected by CVE-1999-1268?
Local users on systems running KDE konsole are affected by CVE-1999-1268 and may exploit the vulnerability.
What types of devices are involved in CVE-1999-1268?
CVE-1999-1268 involves specific device files that KDE konsole accesses for terminal session management.
Can CVE-1999-1268 lead to data breaches?
Yes, CVE-1999-1268 can lead to data breaches as malicious local users can observe or hijack other users' sessions.