Lucene search

[email protected]CVE-2001-0496

HistoryJun 27, 2001 - 4:00 a.m.

CVE-2001-0496

2001-06-2704:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0496

kdesu

kdelibs

temporary files

authentication info

privileges

local users

nvd

6.8 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.

Affected configurations

NVD

Node

mandrakesoftmandrake_linuxMatch2007

redhatlinuxMatch7.1i386

CPENameOperatorVersion
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq2007
redhat:linuxredhat linuxeq7.1

CPE	Name	Operator	Version
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	2007
redhat:linux	redhat linux	eq	7.1

References

www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3

www.redhat.com/support/errata/RHSA-2001-059.html

exchange.xforce.ibmcloud.com/vulnerabilities/6856

6.8 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2001-0496

nvd1 nessus1 cvelist1