CVE-2007-4569 Auth bypass in n/a
Remote attackers can bypass password requirements and log into arbitrary accounts in KDM when autologin and shutdown password features are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-4569?
CVE-2007-4569 is a medium-severity authentication bypass vulnerability in Kde Kde, published on 21 Sep 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2007-4569?
It affects 1 product.
Products include Kde Kde.
How do I fix CVE-2007-4569?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2007-4569 being exploited?
There is no known exploitation of CVE-2007-4569 in the wild and no public exploit code.
Other vulnerabilities in Kde Kde
Sources
Also known as DSA-1376-1, DTSA-60-1, GHSA-mj8p-r5gp-w6p8.