CVE-2006-3742: Kde Kdebase

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.

Affected products

• Kde Kdebase: version 3.5.4_0.4.fc5 only

Published 2006-09-06. Last modified 2026-06-16.