Author: JT Smith
From LWN.net: A problem exists with the kdesu component of kdelibs. It created a
world-readable temporary file to exchange authentication information
and delete it shortly after. This can be abused by a local user to
gain access to the X server and could result in a compromise of the
account that kdesu would access.
world-readable temporary file to exchange authentication information
and delete it shortly after. This can be abused by a local user to
gain access to the X server and could result in a compromise of the
account that kdesu would access.
Category:
- Linux
