CVE-2006-2449

Publication date 15 June 2006

Last updated 17 July 2025

Ubuntu priority

Description

KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
kdebase	7.04 feisty	Fixed in 3.5.6-0ubuntu20.2
	6.10 edgy	Fixed in 3.5.5-0ubuntu3.5
	6.06 LTS dapper	Fixed in 3.5.2-0ubuntu27.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-301-1
kdm vulnerability
15 June 2006

Other references

https://www.cve.org/CVERecord?id=CVE-2006-2449