CVE-2003-1167

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.

Ссылки

http://secunia.com/advisories/10105
Patch
http://www.osvdb.org/2742
Patch
http://www.securityfocus.com/archive/1/342736
Exploit
http://www.securityfocus.com/bid/8915
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/13540
http://secunia.com/advisories/10105
Patch
http://www.osvdb.org/2742
Patch
http://www.securityfocus.com/archive/1/342736
Exploit
http://www.securityfocus.com/bid/8915
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/13540

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gernot_stocker:kpopup:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:gernot_stocker:kpopup:0.9.5_pre2:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00205

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mp2f-xrhw-xjhw

github

почти 4 года назад