CVE-2000-0393 | BDVDB-2026-1276 Detail

Description#

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.novell.com/linux/security/advisories/suse_security_announce_50.html
http://www.securityfocus.com/bid/1206
http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html

Exploit#

No public exploit known

History#

Version 12000-07-12Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.