CVE-2003-0644

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2003-0644
Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users to execute arbitrary commands.

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://lists.debian.org/debian-devel-changes/2003/09/msg00767.html Vendor Advisory
http://lists.kde.org/?l=kde-announce&m=106296509815092&w=2 Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-416.html
http://lists.debian.org/debian-devel-changes/2003/09/msg00767.html Vendor Advisory
http://lists.kde.org/?l=kde-announce&m=106296509815092&w=2 Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-416.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:johannes_sixt:kdbg:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:johannes_sixt:kdbg:1.2.8:*:*:*:*:*:*:*
History

20 Nov 2024, 23:45

Type Values Removed Values Added
References () http://lists.debian.org/debian-devel-changes/2003/09/msg00767.html - Vendor Advisory () http://lists.debian.org/debian-devel-changes/2003/09/msg00767.html - Vendor Advisory
References () http://lists.kde.org/?l=kde-announce&m=106296509815092&w=2 - Patch, Vendor Advisory () http://lists.kde.org/?l=kde-announce&m=106296509815092&w=2 - Patch, Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2005-416.html - () http://www.redhat.com/support/errata/RHSA-2005-416.html -
Information

Published : 2003-09-07 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2003-0644

Mitre link : CVE-2003-0644

CVE.ORG link : CVE-2003-0644

JSON object : View

Products Affected

johannes_sixt

  • kdbg
CWE
NVD-CWE-Other