CVE-2010-0436: Race Condition
Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.
Other sources
Sebastian Krahmer from the SUSE security team discovered a privilege escalation flaw in the KDE Display Manager (kdm).
kdm uses a user owned directory to store a command socket. If the local user can prevent this directory from being removed, they can create a race condition with ksm that could result in setting an arbitrary file on the filesystem to have word writable permissions.
A local user with access to a console running kdm could use this flaw to gain superuser access.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0436?
CVE-2010-0436 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2010-0436?
To mitigate CVE-2010-0436, upgrade to a patched version of KDE Software Compilation that addresses the race condition issue.
Who is affected by CVE-2010-0436?
Local users on systems running affected versions of KDE Software Compilation are at risk of CVE-2010-0436.
What systems are vulnerable to CVE-2010-0436?
CVE-2010-0436 impacts KDE Software Compilation versions ranging from 2.2.0 to 4.4.2.
What is the nature of the exploit for CVE-2010-0436?
The exploit of CVE-2010-0436 involves a race condition that allows unauthorized permission changes to arbitrary files.