CVE-2005-0205

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934Patch
• http://www.debian.org/security/2005/dsa-692Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=208&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kde.org/info/security/advisory-20050228-1.txtPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-175.htmlPatch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000934Patch
• http://www.debian.org/security/2005/dsa-692Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=208&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kde.org/info/security/advisory-20050228-1.txtPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-175.htmlPatch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9596

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0199Integer underflow in the Lists_MakeMask() function in lists.…9.8
• CVE-2005-0200TikiWiki before 1.8.5 does not properly validate files that …
• CVE-2005-0201D-BUS (dbus) before 0.22 does not properly restrict access t…
• CVE-2005-0202Directory traversal vulnerability in the true_path function …
• CVE-2005-0203Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-0204Linux kernel before 2.6.9, when running on the AMD64 and Int…
• CVE-2005-0206The patch for integer overflow vulnerabilities in Xpdf 2.0 a…
• CVE-2005-0207Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.…
• CVE-2005-0208The HTML parsing functions in Gaim before 1.1.4 allow remote…
• CVE-2005-0209Netfilter in Linux kernel 2.6.8.1 allows remote attackers to…
• CVE-2005-0210Netfilter in the Linux kernel 2.6.8.1 allows local users to …
• CVE-2005-0211Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 al…