CVE-2006-2449
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via...
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
Exploit likelihood
What each source reports
NVD Score used
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
- Record
CVE-2006-2449- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
- Record
CVE-2006-2449- Updated
- 2026-11-02
EUVDEUVD-2006-2450 No score
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
- Record
EUVD-2006-2450- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rf2c-jr84-7pmj No score
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via...
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
- Record
GHSA-rf2c-jr84-7pmj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdebaseDebian:3.1 |
before 4:3.3.2-1sarge3, plus listed versions 4:3.3.2-14:3.3.2-1sarge14:3.3.2-1sarge2 |
4:3.3.2-1sarge3 |
kdebaseRed Hat:enterprise_linux:4::as |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-debuginfoRed Hat:enterprise_linux:4::as |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-develRed Hat:enterprise_linux:4::as |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebaseRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-debuginfoRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-develRed Hat:enterprise_linux:4::desktop |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebaseRed Hat:enterprise_linux:4::es |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-debuginfoRed Hat:enterprise_linux:4::es |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-develRed Hat:enterprise_linux:4::es |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebaseRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-debuginfoRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
kdebase-develRed Hat:enterprise_linux:4::ws |
before 6:3.3.1-5.12 | 6:3.3.1-5.12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2449 is a medium vulnerability (CVSS 4.0) in Kde, published June 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in kdebase 4:3.3.2-1sarge3.
References
secunia.com/advisories/21662
osvdb.org/26511
redhat.com/support/errata/RHSA-2006-0548.html
Show 28 moreShow less
securitytracker.com/id?1016297
mandriva.com/security/advisories?name=MDKSA-2006:106
usn.ubuntu.com/301-1
exchange.xforce.ibmcloud.com/vulnerabilities/27181
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9844
vupen.com/english/advisories/2006/2355
debian.org/security/2006/dsa-1156
securityfocus.com/archive/1/437133/100/0/threaded
novell.com/linux/security/advisories/2006_39_kdm.html
kde.org/info/security/advisory-20060614-1.txt
gentoo.org/security/en/glsa/glsa-200606-23.xml
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.444467
nvd.nist.gov/vuln/detail/CVE-2006-2449
github.com/advisories/GHSA-rf2c-jr84-7pmj
access.redhat.com/errata/RHSA-2006:0548
bugzilla.redhat.com/show_bug.cgi?id=194581
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0548.json
cve.org/CVERecord?id=CVE-2006-2449