CVE-2016-3100

EUVD-2016-4155
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
opensuseleap
42.1
opensuseopensuse
13.2
kdekde_frameworks
𝑥
≤ 5.22.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
kinit
bookworm
5.103.0-1
fixed
bullseye
5.78.0-2
fixed
sid
5.115.0-2
fixed
trixie
5.115.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kinit
precise
dne
trusty
dne
wily
ignored
xenial
Fixed 5.18.0-0ubuntu1.1
released
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html
http://www.kde.com/announcements/kde-frameworks-5.23.0.php
http://www.securityfocus.com/bid/91769
https://bugs.kde.org/show_bug.cgi?id=358593
https://bugs.kde.org/show_bug.cgi?id=363140
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13da2c99c864e9022a58
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd
https://www.kde.org/info/security/advisory-20160621-1.txt
http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html
http://www.kde.com/announcements/kde-frameworks-5.23.0.php
http://www.securityfocus.com/bid/91769
https://bugs.kde.org/show_bug.cgi?id=358593
https://bugs.kde.org/show_bug.cgi?id=363140
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13da2c99c864e9022a58
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd
https://www.kde.org/info/security/advisory-20160621-1.txt