Published: 17/01/2003 Updated: 18/10/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Kde

Multiple vulnerabilities in KDE 2 and KDE 3.x up to and including 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote malicious users to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kde kde 2.1
kde kde 2.1.1
kde kde 2.1.2
kde kde 3.0.3
kde kde 3.0.3a
kde kde 2.2
kde kde 2.2.1
kde kde 3.0.4
kde kde 3.0.5
kde kde 2.2.2
kde kde 3.0
kde kde 2.0
kde kde 2.0.1
kde kde 3.0.1
kde kde 3.0.2

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

The KDE team discovered several vulnerabilities in the K Desktop Environment In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be provided remotely to a victim in an e-mail, a webpage ...

NVD-CWE-Other http://www.debian.org/security/2003/dsa-243 http://www.kde.org/info/security/advisory-20021220-1.txt http://www.debian.org/security/2003/dsa-234 http://www.debian.org/security/2003/dsa-235 http://www.debian.org/security/2003/dsa-236 http://www.debian.org/security/2003/dsa-237 http://www.debian.org/security/2003/dsa-238 http://www.debian.org/security/2003/dsa-239 http://www.debian.org/security/2003/dsa-240 http://www.debian.org/security/2003/dsa-241 http://www.debian.org/security/2003/dsa-242 http://www.securityfocus.com/bid/6462 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569 http://www.redhat.com/support/errata/RHSA-2003-002.html http://www.mandriva.com/security/advisories?name=MDKSA-2003:004 http://secunia.com/advisories/8103 http://www.redhat.com/support/errata/RHSA-2003-003.html http://secunia.com/advisories/8067 http://marc.info/?l=bugtraq&m=104049734911544&w=2 http://marc.info/?l=bugtraq&m=104066520330397&w=2 https://nvd.nist.gov https://www.debian.org/security/./dsa-237

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook