CVE-2000-0393
published 2000-05-16CVE-2000-0393: The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain…
PriorityP422high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.82%
52.6th percentile
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kde | kde | — | — |
| kde | kde | — | — |
| kde | kde | — | — |
| kde | kde | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.htmlhttp://www.novell.com/linux/security/advisories/suse_security_announce_50.htmlhttp://www.securityfocus.com/bid/1206http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.htmlhttp://www.novell.com/linux/security/advisories/suse_security_announce_50.htmlhttp://www.securityfocus.com/bid/1206
2000-05-16
Published