CVEvulnerability

CVE-2005-0205

4.6 MEDIUM Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.

Affected configurations

• bernd wuebben kppp 2.1.2 • kde kde 3.1 • kde kde 3.1.1 • kde kde 3.1.2 • kde kde 3.1.3 • kde kde 3.1.4 • kde kde 3.1.5

References