CVE-2016-3100 : kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.

Published 2016-07-13 15:59:02

Updated 2025-04-12 10:46:41

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2016-3100

KDE » Kde Frameworks
Versions up to, including, (<=) 5.22.0
cpe:2.3:a:kde:kde_frameworks:*:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 42.1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-3100

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 19 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-3100

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
8.4	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-3100

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-3100

http://www.securityfocus.com/bid/91769

KDE Frameworks CVE-2016-3100 Weak Permissions Local Privilege Escalation Vulnerability
http://www.kde.com/announcements/kde-frameworks-5.23.0.php
https://www.kde.org/info/security/advisory-20160621-1.txt
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03bcaceef6e9221e8d8cd

Git repository browser
http://lists.opensuse.org/opensuse-updates/2016-07/msg00001.html

openSUSE-SU-2016:1723-1: moderate: Security update for kinit
https://bugs.kde.org/show_bug.cgi?id=358593

358593 – kdeinit5 create /tmp/xauth-xxx-_y with inappropriate permission.
https://bugs.kde.org/show_bug.cgi?id=363140

363140 – World-readable X11 Cookie, easy key logger
https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13da2c99c864e9022a58

Git repository browser

Jump to

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!