CVE-2007-4569

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-21 · updated 2026-06-16
Weakness: CWE-264

Description

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

Affected products

Kde: 3.3, 3.3.0, 3.3.1, 3.3.2, 3.4, 3.4.0 (+12)

References

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
http://secunia.com/advisories/26894
http://secunia.com/advisories/26904
http://secunia.com/advisories/26915
http://secunia.com/advisories/26929
http://secunia.com/advisories/26977
http://secunia.com/advisories/27089
http://secunia.com/advisories/27096
http://secunia.com/advisories/27106
http://secunia.com/advisories/27180
http://secunia.com/advisories/27271
http://security.gentoo.org/glsa/glsa-200710-15.xml

Get alerted when CVE-2007-4569 or the next vulnerability affects your stack