CVE-2005-2101: Medium severity KDE kde vulnerability
Published Aug 17, 2005
·Updated
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files.
Affected Software
27 affected components
KDE kde=3.0
KDE kde=3.0.1
KDE kde=3.0.2
KDE kde=3.0.3
KDE kde=3.0.4
KDE kde=3.0.5
KDE kde=3.0.5a
KDE kde=3.1
KDE kde=3.1.1
KDE kde=3.1.2
KDE kde=3.1.3
KDE kde=3.1.4
KDE kde=3.1.5
KDE kde=3.1_alpha1
KDE kde=3.1_beta1
KDE kde=3.1_beta2
KDE kde=3.2
KDE kde=3.2.0_beta1
KDE kde=3.2.1
KDE kde=3.2.2
KDE kde=3.2.3
KDE kde=3.3
KDE kde=3.3.1
KDE kde=3.3.2
KDE kde=3.4
KDE kde=3.4.1
KDE kde=3.4.2
Remediation
Patch Available
Event History
Aug 17, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2101?
CVE-2005-2101 has been rated as a moderate severity vulnerability.
2
How do I fix CVE-2005-2101?
To mitigate CVE-2005-2101, upgrade KDE to version 3.4.3 or later.
3
Who is affected by CVE-2005-2101?
Local users of KDE versions 3.0 to 3.4.2 are affected by CVE-2005-2101.
4
What does CVE-2005-2101 allow attackers to do?
CVE-2005-2101 allows local users to overwrite arbitrary files due to insecure temporary file creation.
5
In which KDE versions is CVE-2005-2101 present?
CVE-2005-2101 is found in KDE versions from 3.0 to 3.4.2.