kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
| Software | From | Fixed in |
|---|---|---|
| kde / kde | 1.x | 1.x.x |
| suse / suse_linux | 7.0 | 7.0.x |
| suse / suse_linux | 7.0-alpha | 7.0-alpha.x |