CVE-2005-0396

LOW 2.1CVE-2005-0396 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0396 is a LOW (CVSS 2.1) vulnerability affecting dcopserver (kde), desktop communication protocol daemon (kde).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dcopserver kde	`≤ 3.3`	No fix yet
desktop communication protocol daemon kde	`≤ 3.3`	No fix yet

Description

Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."

References

marc.info
security.gentoo.org/glsa/glsa-200503-22.xml · Patch
kde.org/info/security/advisory-20050316-1.txt · Patch
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2005-307.html
redhat.com/support/errata/RHSA-2005-325.html
securityfocus.com/archive/1/427976/100/0/threaded
securityfocus.com/bid/12820
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10432

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free