PT-2002-1563 · Kde · Kde

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0512

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KDE versions 2.3 through 3.1.1

Description The issue allows local users to gain privileges of other users running startkde via Trojan horse libraries, due to the startkde in KDE setting the LD LIBRARY PATH environment variable to include the current working directory.

Recommendations For versions 2.3 through 3.1.1, consider restricting the use of the LD LIBRARY PATH environment variable to prevent the inclusion of the current working directory, or apply configuration changes to prevent the execution of Trojan horse libraries.

Correção

Identificadores relacionados

CVE-2002-0512

Produtos afetados

Kde

Referências · 4

• http://calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt · Aviso do Fabricante
• http://securityfocus.com/bid/4400 · Aviso do Fabricante
• http://iss.net/security_center/static/8737.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0512 · Nota de Segurança