CVE-2002-1281

KDE 2.x-2.1 and 3.x-3.0.4 - Remote Code Execution via rlogin KIO Subsystem

Title source: manual
STIX 2.1

Description

Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.

References (10)

Core 10
Core References
Various Sources vendor-advisory x_refsource_caldera
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10602.php
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/8298
Patch, Vendor Advisory x_refsource_confirm
http://www.kde.org/info/security/advisory-20021111-1.txt
Various Sources vendor-advisory x_refsource_mandrake
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103712550205730&w=2
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-220.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103728981029342&w=2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2002/dsa-204
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6182

Scores

EPSS 0.0633
EPSS Percentile 91.1%

Details

Status published
Products (11)
kde/kde 2.1
kde/kde 2.1.1
kde/kde 2.1.2
kde/kde 2.2
kde/kde 2.2.1
kde/kde 2.2.2
kde/kde 3.0
kde/kde 3.0.1
kde/kde 3.0.2
kde/kde 3.0.3
... and 1 more
Published Nov 29, 2002
Tracked Since Feb 18, 2026