CVE-2003-0690 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0690
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0690

Description: KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-289.html http://www.redhat.com/support/errata/RHSA-2003-286.html http://www.redhat.com/support/errata/RHSA-2003-270.html http://www.redhat.com/support/errata/RHSA-2003-287.html http://www.redhat.com/support/errata/RHSA-2003-288.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:193 MISC http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:091 DEBIAN http://www.debian.org/security/2004/dsa-443 http://www.debian.org/security/2003/dsa-388 CONFIRM http://www.kde.org/info/security/advisory-20030916-1.txt CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106374551513499&w=2

Return to the previous page.