CVE-1999-0781: High severity FreeBSD FreeBSD vulnerability
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Sanitize environment variables before launching KDE components and ensure KDE does not use the KDEDIR environment variable supplied by untrusted users. Unset or ignore KDEDIR when starting KDE or any KDE component that runs with elevated privileges to prevent modification of the executable search path.
KDE (Kde Beta 3) KDEDIR environment variable = unset or ignored in privileged contexts
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0781?
CVE-1999-0781 is considered a moderate severity vulnerability due to its potential for local users to execute arbitrary commands.
How do I fix CVE-1999-0781?
To fix CVE-1999-0781, you should avoid allowing untrusted users to modify the KDEDIR environment variable.
Who is affected by CVE-1999-0781?
CVE-1999-0781 affects local users on systems running KDE, FreeBSD 6.2-stable, and Linux Kernel 2.6.20.1.
What is the impact of CVE-1999-0781?
The impact of CVE-1999-0781 includes the ability for local users to execute arbitrary commands, compromising system security.
Is CVE-1999-0781 still relevant today?
While CVE-1999-0781 may not be widely exploited in modern systems, it's a reminder of the need for proper environment variable management in software.