A vulnerability exists in the implementation of

placing the SuSE YAST Control Center in the K Menu.

Normally, one would be required to authenticate as

root before being granted access to the YAST Control

Center. When placing the 'preferences' submenu in

the K Menu (in the 'submenu' section under the

'Menus' tab of the K menu panel preferences),

however, one can not only access, but make changes to

the options in the YAST control center without having

to authenticate as root.

[ reply ]