CVE-2000-0393 Privilege escalation in n/a
Local attackers can gain elevated privileges by exploiting the KDE kscd program's failure to drop privileges when executing a user-specified shell.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0393?
CVE-2000-0393 is a high-severity vulnerability in Kde Kde, published on 12 Jul 2000. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
Which versions are affected by CVE-2000-0393?
It affects 1 product.
Products include Kde Kde.
How do I fix CVE-2000-0393?
No fix has been published for CVE-2000-0393 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0393 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-0393 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Kde Kde
Sources
Also known as GHSA-ph8q-v7mf-3mfr.