CVE-2003-0690: Critical severity KDE kde vulnerability
KDM in KDE 3.1.3 and earlier does not verify whether the pamsetcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pamkrb5 module.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0690?
CVE-2003-0690 is considered a critical vulnerability as it may allow attackers to gain root privileges.
How does CVE-2003-0690 affect KDE versions?
CVE-2003-0690 affects KDE versions 3.1.3 and earlier, including various earlier versions of KDE.
How do I fix CVE-2003-0690?
To fix CVE-2003-0690, update to a non-vulnerable version of KDE that has patched this vulnerability.
Can CVE-2003-0690 be exploited remotely?
Yes, CVE-2003-0690 can potentially be exploited remotely by triggering error conditions in PAM modules.
What are the implications of CVE-2003-0690 for system security?
The implications of CVE-2003-0690 for system security are severe, as it may allow unauthorized access to critical system resources.