trinity-devel@lists.pearsoncomputing.net

Message: previous - next
Month: May 2014

ksmserver listens on all interfaces

From: Julius Schwartzenberg <julius.schwartzenberg@...>
Date: Mon, 19 May 2014 22:50:21 +0200
Hi all,

I just discovered that at least with Trinity 3.5.12.2, ksmserver is
listening on all interfaces by default. This could be a security
concern. Nmap detects it as the XFCE Session Manager.

It seems this problem was separately fixed in KDE:
https://bugs.kde.org/show_bug.cgi?id=154243

Was anyone aware of this? I guess it would be good to have a fix in
place for R14. Is anyone aware of a workaround?

Thanks,
Julius