CVE-2008-1671: Medium severity kde kde beta 3 vulnerability
startkdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause startkdeinit to send SIGUSR1 signals to other processes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1671?
CVE-2008-1671 is classified as a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2008-1671?
To mitigate CVE-2008-1671, remove the setuid bit from the start_kdeinit binary or upgrade to a non-vulnerable version of KDE.
Who is affected by CVE-2008-1671?
CVE-2008-1671 affects local users running KDE 3.5.5 through 3.5.9 with the start_kdeinit component installed setuid root.
What does CVE-2008-1671 exploit?
CVE-2008-1671 exploits user-influenceable input, specifically command-line arguments, to send SIGUSR1 signals to other processes.
What versions of KDE are vulnerable to CVE-2008-1671?
KDE versions 3.5.5, 3.5.6, 3.5.7, 3.5.8, and 3.5.9 are affected by CVE-2008-1671.