4.6

CVE-2005-0205: bernd_wuebben kppp

CVSS: 4.6v2.0MediumModified
AliasesRHSA-2005:175DSA-692-1
Published 28-02-2005Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2005-0205 is a medium (CVSS 4.6) vulnerability in bernd_wuebben kppp. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.4% of scored vulnerabilities.

Overall risk
18/100
0100
Low · default modelHow is this calculated?
CVSS score
4.6/10
010
Medium · v2.0 (NVD)
EPSS score
0.36%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 28-02-2005
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

0.00 pp

From 0.36% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products
  • kdenetwork< 7:3.1.3-1.8
  • kdenetwork-debuginfo< 7:3.1.3-1.8
  • kdenetwork-devel< 7:3.1.3-1.8
Bernd_wuebben1 product
Debian1 product
  • kdenetwork< 4:2.2.2-14.7
Kde1 product
  • kde3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.1.5

4 vendors · 6 products

References

14 links
Show all 14 references