CVE-2006-2449: Kde

Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days.

KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.

Affected products

• Kde Kde: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.3 only; version 3.3.1 only; …

Published 2006-06-15. Last modified 2026-06-16.