CVE

CVE-2003-0256

Date: (C)2003-05-27   (M)2023-12-22

The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

CLA-2003:665

MDKSA-2003:055

http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2