| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-0690 | 10.0 |
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam
|
11-10-2017 - 01:29 | 06-10-2003 - 04:00 | |
| CVE-2003-0459 | 5.0 |
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
|
11-10-2017 - 01:29 | 27-08-2003 - 04:00 | |
| CVE-2003-0692 | 7.5 |
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
|
11-10-2017 - 01:29 | 06-10-2003 - 04:00 | |
| CVE-2003-0204 | 7.5 |
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
|
18-10-2016 - 02:30 | 05-05-2003 - 04:00 |