CVE-2001-0178

3 documents3 sources
Severity
2.1LOW
EPSS
0.1%
top 71.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Caldera Openlinux EdesktopConectiva LinuxMandrakesoft Mandrake Linux+2 more
Timeline
PublishedMar 26
Latest updateApr 30

Description

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages5 packages

▶NVDsuse/suse_linux6 versions+5
▶NVDmandrakesoft/mandrake_linux4 versions+3

Patches

Patch: www.calderasystems.com ↗Patch: www.linux-mandrake.com ↗Patch: www.calderasystems.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fhpm-fc48-2hx6: kdesu program in KDE2 (KDE before 2↗2022-04-30
▶
CVEList
CVE-2001-0178: kdesu program in KDE2 (KDE before 2↗2001-05-07
▶