CVE-2000-0393: Kde

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.

Affected products

• Kde Kde: version 1.1 only; version 1.1.1 only; version 1.2 only; version 2.0_beta only

Published 2000-05-16. Last modified 2026-06-16.