high7.2Public exploit code
CVE-2003-1167
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- kpopup 0.9.x - Privileged Command Execution2003-10-28 · local · linux · Verified
Impact
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gernot Stocker | Kpopup | Versions 0.9.1, 0.9.5_pre2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/10105
- http://www.osvdb.org/2742
- http://www.securityfocus.com/archive/1/342736
- http://www.securityfocus.com/bid/8915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13540
- http://secunia.com/advisories/10105
- http://www.osvdb.org/2742
- http://www.securityfocus.com/archive/1/342736
- http://www.securityfocus.com/bid/8915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13540