Is CVE-1999-1267 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1267 being exploited in the wild.

How severe is CVE-1999-1267?

Medium severity, with a CVSS score of 5, published 5 May 1997.

Which products and versions are affected?

KDE K Desktop Environment (KDE) Versions using kfm prior to May 1997.

Is there a fix for CVE-1999-1267?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-1267 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-1267?

Check whether you run Kde or Kde Plasma. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1267: KDE kfm arbitrary file modification via insecure TCP server

CVE-1999-1267 · Severity: medium · CVSS 5 · Published 1997-05-05

The KDE file manager (kfm) contains a security flaw in how it handles file operations. Because it uses an unsecured network connection to process commands, a remote attacker could potentially modify or overwrite files on a user's system. This could lead to unauthorized access or the corruption of important configuration files.

Technologies: Kde. Vendors: Kde.

Quick answers

Is CVE-1999-1267 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1267 being exploited in the wild.
How severe is CVE-1999-1267?: Medium severity, with a CVSS score of 5, published 5 May 1997.
Which products and versions are affected?: KDE K Desktop Environment (KDE) Versions using kfm prior to May 1997.
Is there a fix for CVE-1999-1267?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-1267 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-1267?: Check whether you run Kde or Kde Plasma. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The KDE file manager (kfm) implements a TCP server to facilitate communication between desktop modules. This server lacks authentication and proper access controls, allowing any network-reachable attacker to send commands to the service. Specifically, an attacker can issue 'copy' commands to the server. If an attacker can place a malicious file on the target system (e.g., via anonymous FTP), they can then instruct kfm to copy that file into sensitive locations, such as a user's .rhosts file, to gain further access. The recommended fix is to migrate the communication mechanism from TCP sockets to AF_UNIX sockets with restricted file permissions.

Affected products

KDE K Desktop Environment (KDE) Versions using kfm prior to May 1997

Timeline

1997-05-05: disclosed: Vulnerability reported on Bugtraq by Alan Cox
1997-05-05: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.