Show filters
16 Total Results
Displaying 11-16 of 16
Sort by:
Attacker Value
Unknown
CVE-2003-0692
Disclosure Date: October 06, 2003 (last updated February 22, 2025)
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
0
Attacker Value
Unknown
CVE-2003-0204
Disclosure Date: May 05, 2003 (last updated February 22, 2025)
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
0
Attacker Value
Unknown
CVE-2002-1393
Disclosure Date: January 17, 2003 (last updated February 22, 2025)
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
0
Attacker Value
Unknown
CVE-2002-1247
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
0
Attacker Value
Unknown
CVE-2002-0227
Disclosure Date: May 16, 2002 (last updated February 22, 2025)
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
0
Attacker Value
Unknown
CVE-2000-0393
Disclosure Date: May 16, 2000 (last updated February 22, 2025)
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
0
