Lucene search

MitreCVE-2001-0178

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2001-0178

2001-05-0704:00:00

mitre

web.nvd.nist.gov

cve-2001-0178

kde

kdesu program

password security

privilege escalation

unix socket

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.

Affected configurations

Nvd

Node

conectivalinuxMatch6.0

Node

calderaopenlinux_edesktopMatch2.4

mandrakesoftmandrake_linuxMatch6.1

mandrakesoftmandrake_linuxMatch7.0

mandrakesoftmandrake_linuxMatch7.1

mandrakesoftmandrake_linuxMatch7.2

mandrakesoftmandrake_linux_corporate_serverMatch1.0.1

susesuse_linuxMatch6.0

susesuse_linuxMatch6.1

susesuse_linuxMatch6.2

susesuse_linuxMatch6.3

susesuse_linuxMatch6.4

susesuse_linuxMatch7.0

VendorProductVersionCPE
conectivalinux6.0cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*
calderaopenlinux_edesktop2.4cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*
mandrakesoftmandrake_linux6.1cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*
mandrakesoftmandrake_linux7.0cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*
mandrakesoftmandrake_linux7.1cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
mandrakesoftmandrake_linux7.2cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
mandrakesoftmandrake_linux_corporate_server1.0.1cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*
susesuse_linux6.0cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*
susesuse_linux6.1cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*
susesuse_linux6.2cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
conectiva	linux	6.0	cpe:2.3:o:conectiva:linux:6.0:::::::*
caldera	openlinux_edesktop	2.4	cpe:2.3:o:caldera:openlinux_edesktop:2.4:::::::*
mandrakesoft	mandrake_linux	6.1	cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:::::::*
mandrakesoft	mandrake_linux	7.0	cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:::::::*
mandrakesoft	mandrake_linux	7.1	cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:::::::*
mandrakesoft	mandrake_linux	7.2	cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:::::::*
mandrakesoft	mandrake_linux_corporate_server	1.0.1	cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:::::::*
suse	suse_linux	6.0	cpe:2.3:o:suse:suse_linux:6.0:::::::*
suse	suse_linux	6.1	cpe:2.3:o:suse:suse_linux:6.1:::::::*
suse	suse_linux	6.2	cpe:2.3:o:suse:suse_linux:6.2:::::::*

Rows per page:

1-10 of 131

References

www.calderasystems.com/support/security/advisories/CSSA-2001-005.0.txt

www.linux-mandrake.com/en/security/2001/MDKSA-2001-018.php3?dis=7.2

www.novell.com/linux/security/advisories/2001_002_kdesu_txt.html

exchange.xforce.ibmcloud.com/vulnerabilities/5995

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2001-0178