SUSE CVE-2016-7787

A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...

CVE-2016-7787

A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...

KDE2 kdesu 'keep password' option does not verify socket listener potentially exposing su password

Overview kdesu is a interactive interface to the substitute user su command for the KDE environment. To pass authentication information, it creates a file that may be read by unauthorized users. Description kdesu communicates with su using a socket, implemented as a file in /tmp with a predictabl...

Security Update: CSSA-2001-005.0 password sniffing in kdesu

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: password sniffing in kdesu Advisory number: CSSA-2001-005.0 Issue date: 2001 January, 23 Cross reference: 1. Problem Description KDE2 comes with a program called kdesu that is used to run certain...

Дырка в kdesu

Можно перехватить пароль администратора вводимый в kdesu...