Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kde Subscribe
Filtered by product Kcheckpass
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-5054 1 Kde 1 Kcheckpass 2017-08-28 6.9 MEDIUM N/A
kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122. NOTE: the vendor indicates that the possibility of resultant privilege escalation may be "a bit far-fetched."