CVE-2003-0690 KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as dem...
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kde | = 1.1 | No fix listed |
| kde | = 1.1.1 | No fix listed |
| kde | = 1.1.2 | No fix listed |
| kde | = 1.2 | No fix listed |
| kde | = 2.0 | No fix listed |
| kde | = 2.0.1 | No fix listed |
| kde | = 2.0_beta | No fix listed |
| kde | = 2.1 | No fix listed |
| kde | = 2.1.1 | No fix listed |
| kde | = 2.1.2 | No fix listed |
| kde | = 2.2 | No fix listed |
| kde | = 2.2.1 | No fix listed |
| kde | = 2.2.2 | No fix listed |
| kde | = 3.0 | No fix listed |
| kde | = 3.0.1 | No fix listed |
| kde | = 3.0.2 | No fix listed |
| kde | = 3.0.3 | No fix listed |
| kde | = 3.0.3a | No fix listed |
| kde | = 3.0.4 | No fix listed |
| kde | = 3.0.5 | No fix listed |
| kde | = 3.0.5a | No fix listed |
| kde | = 3.0.5b | No fix listed |
| kde | = 3.1 | No fix listed |
| kde | = 3.1.1 | No fix listed |
| kde | = 3.1.1a | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| kde | = 3.1.2 | No fix listed |
| kde | = 3.1.3 | No fix listed |
References
- cert.uni-stuttgart.de
- CLA-2003:747 vendor-advisory
- 20030916 [KDE SECURITY ADVISORY] KDM vulnerabilities mailing-list
- DSA-388 vendor-advisory
- DSA-443 vendor-advisory
- www.kde.org patch vendor-advisory
- MDKSA-2003:091 vendor-advisory
- RHSA-2003:270 patch vendor-advisory
- RHSA-2003:286 vendor-advisory
- RHSA-2003:287 vendor-advisory
- RHSA-2003:288 vendor-advisory
- RHSA-2003:289 vendor-advisory
- oval:org.mitre.oval:def:193 signature vdb-entry