CVE-2000-0393
Published May 16, 2000
Last updated 16 years ago
Overview
- Description
- The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55B38F8C-9451-441B-BCD8-E41C1A2231DD"
},
{
"criteria": "cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D04A4717-229D-4E20-8FD2-DC13757B0AC5"
},
{
"criteria": "cpe:2.3:o:kde:kde:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6767505-CFD5-4C66-A67A-4740E2994CC8"
},
{
"criteria": "cpe:2.3:o:kde:kde:2.0_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC14C38A-AAA8-463E-AA7C-F16C6CB3A3EE"
}
],
"operator": "OR"
}
]
}
]