CNCVE编号：CNCVE-20010610 CVE编号：CAN-2001-0610 安全级别：中 漏洞中文描述： KDE 1.x中的kfm允许本地攻击者通过在/tmp中kfm的缓存区目录来获得额外的权限。 漏洞英文描述： kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. 漏洞参考： Reference: BUGTRAQ:20010418 Insecure directory handling in KFM file manager Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html Reference: XF:kfm-tmpfile-symlink(6428) Reference: URL:http://xforce.iss.net/static/6428.php 系统类型：其他 漏洞类型：权限有效性检查错误