CVE-2007-4569
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown...
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
- Record
CVE-2007-4569- CVSS 2.0
- 6.8 Medium
AV:L/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
- Record
CVE-2007-4569- Updated
- 2026-11-02
EUVDEUVD-2007-4551 No score
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
- Record
EUVD-2007-4551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mj8p-r5gp-w6p8 No score
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown...
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
- Record
GHSA-mj8p-r5gp-w6p8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kdebaseDebian:4.0 |
before 4:3.5.5a.dfsg.1-6etch1, plus listed versions 4:3.5.5a.dfsg.1-6 |
4:3.5.5a.dfsg.1-6etch1 |
kdebaseDebian:5.0 |
before 4:3.5.7-3lenny1 | 4:3.5.7-3lenny1 |
kdebaseRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdebase-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebase-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 6:3.3.1-6.el4 | 6:3.3.1-6.el4 |
kdebaseRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebaseRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebaseRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
kdebase-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 6:3.5.4-15.el5 | 6:3.5.4-15.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, published, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4569 is a medium vulnerability (CVSS 6.8) in Kde, published September 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. Fixed in kdebase 4:3.5.5a.dfsg.1-6etch1.
References
secunia.com/advisories/27271
security.gentoo.org/glsa/glsa-200710-15.xml
redhat.com/archives/fedora-package-announce/2007-October/msg00022.html
debian.org/security/2007/dsa-1376
Show 35 moreShow less
kde.org/info/security/advisory-20070919-1.txt
vupen.com/english/advisories/2007/3227
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10359
lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
mandriva.com/security/advisories?name=MDKSA-2007:190
securitytracker.com/id?1018724
exchange.xforce.ibmcloud.com/vulnerabilities/36711
ubuntu.com/usn/usn-517-1
securityfocus.com/bid/25730
issues.rpath.com/browse/RPL-1725
nvd.nist.gov/vuln/detail/CVE-2007-4569
github.com/advisories/GHSA-mj8p-r5gp-w6p8
access.redhat.com/errata/RHSA-2007:0905
bugzilla.redhat.com/show_bug.cgi?id=248537
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0905.json
cve.org/CVERecord?id=CVE-2007-3820