Unscored severity · published Aug 12, 2002
CVE-2002-0512
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Openlinux Server · Caldera
3.1.1 · source: NVD
OW
Openlinux Workstation · Caldera
3.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0512
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0512
Vendor Advisory
http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt
www.iss.net
http://www.iss.net/security_center/static/8737.php
Patch
http://www.securityfocus.com/bid/4400
More from Openlinux Server
–
CVE-2003-0658
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary…
–
CVE-2002-0835
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones
–
CVE-2002-0164
Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a…
–
CVE-2002-0004
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice
–
CVE-2001-0851
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie