← Database

CVE-2003-0690

CRITICAL CVSS: 10.0 Published: 2003-10-06 Modified: 2026-06-16

Description

KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.

Affected Platforms

Kde Kde

Weakness Type

NVD-CWE-Other

References