The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
| Software | From | Fixed in |
|---|---|---|
| kbd-project / kbd | 1.04 | 1.04.x |
| kbd-project / kbd | 1.12 | 1.12.x |
| kbd-project / kbd | 1.01 | 1.01.x |
| kbd-project / kbd | 0.99 | 0.99.x |
| kbd-project / kbd | - | 1.14.1.x |
| kbd-project / kbd | 1.08 | 1.08.x |
| kbd-project / kbd | 1.05 | 1.05.x |
| kbd-project / kbd | 1.14 | 1.14.x |
| kbd-project / kbd | 1.13 | 1.13.x |
| kbd-project / kbd | 1.03 | 1.03.x |
| kbd-project / kbd | 1.06 | 1.06.x |
| kbd-project / kbd | 1.10 | 1.10.x |
| kbd-project / kbd | 1.11 | 1.11.x |
| opensuse / opensuse | 11.2 | 11.2.x |
| opensuse / opensuse | 11.3 | 11.3.x |