CVE-2000-0393

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: May 16, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03945.0NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Mid CVE-2000-03955.0Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.CVE-2000-03965.0The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the at CVE-2000-03975.0The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a CVE-2000-039810.0Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long quer CVE-2000-03995.0Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.CVE-2000-04007.5The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an atta CVE-2000-04017.5Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long q CVE-2000-04022.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file CVE-2000-04035.0The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host CVE-2000-04045.0The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser CVE-2000-040510.0Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.