Unscored CVE-2001-0178 EUVD-2001-0178GHSA-fhpm-fc48-2hx6

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allow…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.

References

SuSE-SA:2001:02 vendor-advisory
CSSA-2001-005.0 vendor-advisory
MDKSA-2001:018 vendor-advisory
kde2-kdesu-retrieve-passwords(5995) vdb-entry