CVE-2001-0178

CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...

CVE-2000-0918

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...

CVE-2000-0918: Undefined Security Weakness

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...

Linux news 14.12.00

Ядро 2.2.18 Наконец-то вышло следующее стабильное ядро из ветки 2.2. Подробнее: http://www.kernel.org/pub/linux/kernel/v2.2/linux-2.2.18.log Linux Kernel 2.4.0-test12 is out Вышла новая тестовая версия ядра линух 2.4.0 Подробнее: http://dredd.crimea.edu/linuxnews/test12.txt Ядро 2.4.0-test13-pre1...

CVE-2000-0918

The CVE-2000-0918 entry describes a format string vulnerability in KDE's kvt component (version 1.1.2) that may allow local users to execute arbitrary commands via a DISPLAY environment variable containing formatting characters. The affected software is KDE 1.1.2; root cause is unsafe format-stri...

CVE-2000-0918

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...

Linux news 20.11.00

Следующий шаг ядра стабильной ветки - 2.2.18pre22 Следующий шаг на пути к 2.2.19. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-19-009-04-NW-KN Linux 2.4.0-test11 Вышло очередное тестовое ядро... Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ AC Kernel Patch 2.2.x 2.2.18pre...

Linux news 1.11.00

Linux 2.2.18pre18 Alan Cox выпустил очередную pre-версию следующего стабильного ядра Linux: Linux 2.2.18pre18. Подробнее: http://linuxtoday.com/newsstory..php3?ltsn=2000-10-29-007-04-NW-KN Linux-2.4.0-test10-final Возможно последнее ядро в 2.4.0-test серии. Для релиза 2.4.0-stable ожидается...

CVE-2000-0481

Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name...

CVE-2000-0530

The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...

CVE-2000-0481

CVE-2000-0481 describes a buffer overflow in KDE Kmail triggered by an attachment with a long file name, allowing a remote attacker to cause a denial of service. The NVD entry lists a Network-attack vector, low complexity, no authentication, with Availability impact described as Partial. The CVSS...

CVE-2000-0530

The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...

CVE-2000-0481: Undefined Security Weakness

Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name...

CVE-2000-0530: Undefined Security Weakness

The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...

kvt format bug

kdebase-1.1.2 xsetup.c:229 displayname = getenv"DISPLAY"; command.c:1720 extern char displayname; command.c:1840 cprintfdisplayname; command.c:1464 void cprintfunsigned char fmt,... Patch attached. -- Carlos E Gorges [email protected] Tech informбtica LTDA Brazil...

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...

CVE-2000-0373

Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges...

CVE-2000-0393

The CVE-2000-0393 issue affects the KDE kscd program. It does not drop privileges when executing a program specified in a user’s SHELL environment variable, allowing a local user to gain privileges by directing kscd to run an alternate program. The description only states the vulnerability; it do...

CVE-2000-0373

Technical details about CVE-2000-0373 are not publicly available in the provided documents; the KDE kvt vulnerability is noted, but specifics (affected versions, root cause, remediation) are not disclosed here. Monitor for official updates.

CVE-2000-0393

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute...