PT-2002-1563 · Kde · Kde

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0512

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KDE versions 2.3 through 3.1.1

Description The issue allows local users to gain privileges of other users running startkde via Trojan horse libraries, due to the startkde in KDE setting the LD LIBRARY PATH environment variable to include the current working directory.

Recommendations For versions 2.3 through 3.1.1, consider restricting the use of the LD LIBRARY PATH environment variable to prevent the inclusion of the current working directory, or apply configuration changes to prevent the execution of Trojan horse libraries.

Fix

Related Identifiers

CVE-2002-0512

Affected Products

Kde

References · 4

• http://calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt · Vendor Advisory
• http://securityfocus.com/bid/4400 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0512 · Security Note
• http://iss.net/security_center/static/8737.php · Note