CVE Catalog

CVE-1999-0781

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.42%

33th percentile - higher than 33% of all known CVEs

Summary

KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable, which modifies the search path that KDE uses to locate its executables.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized commands, potentially leading to system compromise by local users.

Recommendation

It is recommended to restrict access to the KDEDIR variable and to monitor and control the permissions of local users.

Other vulnerabilities in KDE

Original NVD description (English source)

KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS