10
CVSSv2

CVE-2003-0690

Published: 06/10/2003 Updated: 11/10/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

KDM in KDE 3.1.3 and previous versions does not verify whether the pam_setcred function call succeeds, which may allow malicious users to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.

Vulnerable Product Search on Vulmon Subscribe to Product

kde kde 1.1

kde kde 1.1.1

kde kde 2.1.1

kde kde 2.1.2

kde kde 3.0.3a

kde kde 3.0.4

kde kde 3.1.2

kde kde 3.1.3

kde kde 2.0

kde kde 2.0.1

kde kde 3.0

kde kde 3.0.1

kde kde 3.0.5b

kde kde 3.1

kde kde 2.0_beta

kde kde 2.1

kde kde 3.0.2

kde kde 3.0.3

kde kde 3.1.1

kde kde 3.1.1a

kde kde 1.1.2

kde kde 1.2

kde kde 2.2

kde kde 2.2.1

kde kde 2.2.2

kde kde 3.0.5

kde kde 3.0.5a

Vendor Advisories

Two vulnerabilities were discovered in kdebase: CAN-2003-0690: KDM in KDE 313 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module CAN-2003-0692: ...
A number of vulnerabilities have been discovered in XFree86 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2004-0083: Buffer overflow in ReadFontAlias from dirfilec of XFree86 410 through 430 allows local users and remote attackers to execute arbitrary cod ...