Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.1
CVSSv2

CVE-2013-2120

Published: 11/02/2020 Updated: 21/02/2020
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 8.4 | Impact Score: 5.9 | Exploitability Score: 2.5
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Paste Applet

Vulnerability Summary

The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet prior to 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent malicious users to bypass authentication via a brute-force attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

kde paste applet

Vendor Advisories

Debian CVElist Bug Report Logs: kdeplasma-addons: CVE-2013-2120
Debian Bug report logs - #710497 kdeplasma-addons: CVE-2013-2120 Package: kdeplasma-addons; Maintainer for kdeplasma-addons is Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Source for kdeplasma-addons is src:kdeplasma-addons (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> ...

References

CWE-287http://archives.neohapsis.com/archives/bugtraq/2013-05/0114.htmlhttps://projects.kde.org/projects/kde/kdeplasma-addons/repository/revisions/36a1fe49cb70f717c4a6e9eeee2c9186503a8dcehttp://openwall.com/lists/oss-security/2013/05/29/6https://bugzilla.redhat.com/show_bug.cgi?id=969421http://openwall.com/lists/oss-security/2013/05/28/5https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710497https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook