Description
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
Affected products
- caldera / openlinux2.4 – 2.4
- KDE / kde1.1.2 – 1.1.2
Exploits & proofs of concept
- exploit-dbKDE 1.1.2 KApplication configfile - Local Privilege Escalation (3)by IhaQueR
- exploit-dbKDE 1.1.2 KApplication configfile - Local Privilege Escalation (2)by kil3r
- exploit-dbKDE 1.1.2 KApplication configfile - Local Privilege Escalation (1)by kil3r
References
- MISChttp://archives.neohapsis.com/archives/bugtraq/2000-05/0387.html
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/4583
- MISCftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-015.0.txt
- MISChttp://www.securityfocus.com/bid/1291
- MISChttp://www.redhat.com/support/errata/RHSA-2000-032.html
Updated 13m ago · 8 sources