Multiple KDE Products CVE-2015-1308 Security Bypass Vulnerability

Bugtraq ID:	72284
Class:	Design Error
CVE:	CVE-2015-1308
Remote:	Yes
Local:	No
Published:	Jan 22 2015 12:00AM
Updated:	Jan 22 2015 12:00AM
Credit:	Martin Gr�lin mgraesslin () kde org
Vulnerable:	KDE plasma workspace 4.9 KDE Kde-Workspace 4.14.3 KDE Kde-Workspace 4.10.5 KDE kde workspace 4.2
Not Vulnerable:	KDE plasma workspace 5.1.95

Multiple KDE Products CVE-2015-1308 Security Bypass Vulnerability

Multiple KDE products are prone to a security-bypass vulnerability.

Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions.

Multiple KDE Products CVE-2015-1308 Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple KDE Products CVE-2015-1308 Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

Multiple KDE Products CVE-2015-1308 Security Bypass Vulnerability

References:

• KDE Homepage (KDE)
  
• Revision 0ac34dca (KDE)
  
• KDE Project Security Advisory (SecLists.Org)