Page 2 of 14 results (0.003 seconds)

CVSS: 9.8EPSS: 2%CPEs: 15EXPL: 0

CVE-2002-1393

https://notcve.org/view.php?id=CVE-2002-1393

08 Jan 2003 — Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses. Múltiples vulnerabilidades en KDE 2 y KDE 3.x a 3.0.5 no ponen entre comillas ciertos parámetros que son insertados en comando de shell, lo que podría permitir a atacantes remotos ejecutar comandos arbitrarios mediante URLs, nombres de ficheros o direcciones de... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569 •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2002-1247

https://notcve.org/view.php?id=CVE-2002-1247

14 Nov 2002 — Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon. Desbordamiento de búfer en resLISa en KDE 2.1 A 3.0.4 y LISa anteriores a 0.2.2 permite a usuarios locales obtener acceso a raw sockets mediante una variable de entorno LOGNAME larga. • http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2002-1223

https://notcve.org/view.php?id=CVE-2002-1223

28 Oct 2002 — Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file. Desbordamiento de búfer en el procesador (parser) DSC 3.0 de GSView usado en KGhostView en KDE 1.1 y KDE 3.0.3a, puede permitir a atacantes causar una denegación de servicio o ejecutar código arbitrario mediante un fichero de entrada PostScript (.ps) modificado. • http://archives.neohapsis.com/archives/bugtraq/2002-10/0163.html •

CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 1

CVE-2000-0393 – KDE 1.1/1.1.1/1.2/2.0 kscd - SHELL Environmental Variable

https://notcve.org/view.php?id=CVE-2000-0393

16 May 2000 — The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. • https://www.exploit-db.com/exploits/19915 •