CVE Catalog

CVE-1999-1267

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.15%

63th percentile - higher than 63% of all known CVEs

Summary

The KDE file manager (kfm) uses a TCP server for certain file operations, allowing remote attackers to modify arbitrary files by sending a copy command to the server.

Risk Assessment

An attacker can remotely modify files, potentially leading to data loss or the introduction of malicious software.

Recommendation

It is recommended to block access to the TCP server or implement appropriate security measures to prevent unauthorized users from performing file operations.

Original NVD description (English source)

KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS