Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KDE KDM PAM模块PAM_SetCred权限提升漏洞
Vulnerability Description
KDE是一款免费开放源代码X桌面管理程序，设计用于Unix和Linux操作系统。 KDE Display Manager当结合使用PAM验证模块时存在问题，远程攻击者可以利用这个漏洞未授权访问系统。 KDM在处理pam_setcred()函数调用时存在问题，部分配置下MIT pam_krb5模块会导致pam_setcred()调用失败而使会话依旧处于存活状态，普通用户拥有合法帐户名和密码可以以ROOT权限访问系统。
CVSS Information
N/A
Vulnerability Type
N/A