CVE-2002-0512

startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt	Vendor Advisory
http://www.iss.net/security_center/static/8737.php
http://www.securityfocus.com/bid/4400	Patch Vendor Advisory
http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt	Vendor Advisory
http://www.iss.net/security_center/static/8737.php
http://www.securityfocus.com/bid/4400	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:caldera:openlinux_server:3.1.1:::::::*
	cpe:2.3:a:caldera:openlinux_workstation:3.1.1:::::::*

History

20 Nov 2024, 23:39

Type	Values Removed	Values Added
References	~~() http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt - Vendor Advisory~~	() http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt - Vendor Advisory
References	~~() http://www.iss.net/security_center/static/8737.php -~~	() http://www.iss.net/security_center/static/8737.php -
References	~~() http://www.securityfocus.com/bid/4400 - Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/4400 - Patch, Vendor Advisory

Information

Published : 2002-08-12 04:00

Updated : 2024-11-20 23:39

NVD link : CVE-2002-0512

Mitre link : CVE-2002-0512

CVE.ORG link : CVE-2002-0512

JSON object : View

Products Affected

caldera

openlinux_workstation
openlinux_server

CWE

NVD-CWE-Other

{"id": "CVE-2002-0512", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-08-12T04:00:00.000", "references": [{"url": "http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8737.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4400", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/8737.php", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4400", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries."}, {"lang": "es", "value": "starkde en KDE para Caldera OpenLinux 2.3 a 3.1.1 establece la variable de entorno LD_LIBRARY_PATH incluyendo el directorio actual de trabajo (.) lo que podr\u00eda permitir a usuarios locales ganar privilegios de otros usuarios locales que ejecuten starkde mediante librer\u00edas que sean caballos de troya."}], "lastModified": "2024-11-20T23:39:15.947", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59A82AD5-A42D-49FF-A9D4-A57C8433A5A1"}, {"criteria": "cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C31B1A4A-96AD-4322-8AF3-733D66DBB50E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}