CVE-2003-0690 in KDE
Résumé (Anglaise)
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
Réserver
14/08/2003
Divulgation
06/10/2003
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 20848 | KDE PAM Module pam_setcred élévation de privilèges | 269 | Non défini | Correctif officiel | CVE-2003-0690 |