Unscored DSA-388 2 CVEs

kdebase - several vulnerabilities

Published Sep 19, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	kdebase	4:2.2.2-14.7

Vulnerabilities 2

Unscored —

CVE-2003-0690

KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers …

Sep 18, 2003
Unscored —

CVE-2003-0692

KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy,…

Sep 18, 2003