CVE-2000-0393: The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variabl
Summary
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:31:02.430Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
References
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_50.html
- http://www.securityfocus.com/bid/1206
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_50.html
- http://www.securityfocus.com/bid/1206