Oval Definition:oval:org.opensuse.security:def:20163100
Revision Date:2022-06-30Version:1
Title:CVE-2016-3100
Description:

kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-3100
Mitre CVE-2016-3100
SUSE CVE-2016-3100
openSUSE-SU-2016:1723-1
openSUSE-SU-2016:1723-1
SUSE-SU-2016:2217-1
SUSE-SU-2016:2217-1
Platform(s):openSUSE 13.2
openSUSE Leap 15.0
openSUSE Leap 15.3
openSUSE Leap 15.4
openSUSE Leap 42.1
openSUSE Leap 42.2
openSUSE Leap 42.3
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Package Hub for SUSE Linux Enterprise 12 SP1
Product(s):
Definition Synopsis
  • openSUSE 13.2 is installed
  • AND Package Information
  • kinit-5.11.0-27.1 is installed
  • OR kinit-32bit-5.11.0-27.1 is installed
  • OR kinit-devel-5.11.0-27.1 is installed
  • OR kinit-lang-5.11.0-27.1 is installed
  • Definition Synopsis
  • openSUSE Leap 42.2 is installed
  • AND Package Information
  • kinit-5.26.0-1.2 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-devel-5.26.0-1.2 is installed
  • AND kinit-devel is signed with openSUSE key
  • OR
  • kinit-lang-5.26.0-1.2 is installed
  • AND kinit-lang is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 42.1 is installed
  • AND Package Information
  • kinit-5.21.0-15.1 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-32bit-5.21.0-15.1 is installed
  • AND kinit-32bit is signed with openSUSE key
  • OR
  • kinit-devel-5.21.0-15.1 is installed
  • AND kinit-devel is signed with openSUSE key
  • OR
  • kinit-lang-5.21.0-15.1 is installed
  • AND kinit-lang is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 42.3 is installed
  • AND Package Information
  • kinit-5.32.0-1 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-devel-5.32.0-1 is installed
  • AND kinit-devel is signed with openSUSE key
  • OR
  • kinit-lang-5.32.0-1 is installed
  • AND kinit-lang is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 SP1 is installed
  • AND Package Information
  • kinit-5.20.0-6 is installed
  • OR kinit-devel-5.20.0-6 is installed
  • OR kinit-lang-5.20.0-6 is installed
  • Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • kinit-5.45.0-lp150.1 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-lang-5.45.0-lp150.1 is installed
  • AND kinit-lang is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • kinit-5.29.0-1.1 is installed
  • OR kinit-32bit-5.29.0-1.1 is installed
  • OR kinit-devel-5.29.0-1.1 is installed
  • OR kinit-lang-5.29.0-1.1 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 SP1 is installed
  • AND Package Information
  • kinit-5.20.0-6.1 is installed
  • OR kinit-devel-5.20.0-6.1 is installed
  • OR kinit-lang-5.20.0-6.1 is installed
  • Definition Synopsis
  • openSUSE Leap 15.3 is installed
  • AND Package Information
  • kinit-5.76.0-bp153.1.15 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-lang-5.76.0-bp153.1.15 is installed
  • AND kinit-lang is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 15.4 is installed
  • AND Package Information
  • kinit-5.90.0-bp154.1.48 is installed
  • AND kinit is signed with openSUSE key
  • OR
  • kinit-lang-5.90.0-bp154.1.48 is installed
  • AND kinit-lang is signed with openSUSE key
  • BACK