CVE-2005-0205: Medium severity Bernd Wuebben Kppp vulnerability
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0205?
CVE-2005-0205 is considered a moderate severity vulnerability due to its potential impact on local users' access to critical system files.
How do I fix CVE-2005-0205?
To fix CVE-2005-0205, ensure that KPPP is not setuid root or apply the latest security patches provided by your distribution.
Who is affected by CVE-2005-0205?
CVE-2005-0205 affects users of KPPP version 2.1.2 and KDE versions 3.1.5 and earlier.
What are the consequences of CVE-2005-0205?
Exploitation of CVE-2005-0205 can allow local users to alter DNS name resolution by manipulating system files like /etc/hosts and /etc/resolv.conf.
Is CVE-2005-0205 an external threat or a local threat?
CVE-2005-0205 is classified as a local threat, impacting users with local access to the affected systems.