Vulnerabilities > CVE-2000-0393 - Unspecified vulnerability in KDE

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
kde
exploit available
NVD
Published: 2000-05-16
Updated: 2008-09-10

Summary

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.

Vulnerable Configurations

Part Description Count
OS
Kde
4

Exploit-Db

descriptionKDE 1.1/1.1.1/1.2/2.0 kscd SHELL Environmental Variable Vulnerability. CVE-2000-0393. Local exploit for linux platform
idEDB-ID:19915
last seen2016-02-02
modified2000-05-16
published2000-05-16
reporterSebastian
sourcehttps://www.exploit-db.com/download/19915/
titleKDE 1.1/1.1.1/1.2/2.0 kscd SHELL Environmental Variable Vulnerability

References