Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kpopup不安全系统调用任意命令执行漏洞
Vulnerability Description
Kpopup是一款KDE程序，用于发送和接收MS Windows WinPopup消息的程序。 Kpopup程序使用不安全的system(3)调用外部工具，本地攻击者可以利用这个漏洞以root用户权限在系统上执行任意命令。 Kpopup程序依靠PATH环境变量不安全的使用system()函数来调用killall(1)程序，当执行Kpopup时如果设置环境变量，就可能导致恶意的伪造的killall(1)程序执行。许多目前的SHELL会阻止通过setuid/setgid进程使用这些函数，而且如果进程不匹配进程
CVSS Information
N/A
Vulnerability Type
N/A