## Description

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### kde - kde

Affected Versions:

- 1.1

### kde - kde

Affected Versions:

- 1.1.1

### kde - kde

Affected Versions:

- 1.2

### kde - kde

Affected Versions:

- 2.0_beta

## References

- http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_50.html
- http://www.securityfocus.com/bid/1206
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_50.html
- http://www.securityfocus.com/bid/1206

Neural Processor Active