CVE-2001-0178

CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...

CVE-2001-0178

kdesu program in KDE2 KDE before 2.2.0-6 does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges...

CVE-2001-0178

kdesu program in KDE2 KDE before 2.2.0-6 does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges...

FreeBSD 3.1 / Solaris 2.6 - Domain Socket

// source: https://www.securityfocus.com/bid/456/info Solaris 2.6 and many other unices/clones have a serious problem with their unix domain socket implementation that has it's origins in old BSD code. Any unix socket created by any application is set mode 4777. In Solaris versions 2.5 and earlie...