startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/4400 | Patch Vendor Advisory |
http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt | Vendor Advisory |
http://www.iss.net/security_center/static/8737.php |
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-08-11 21:00
Updated : 2008-09-05 13:28
NVD link : CVE-2002-0512
Mitre link : CVE-2002-0512
JSON object : View
CWE
Products Affected
caldera
- openlinux_server
- openlinux_workstation