Back to CVE Browser

CVE-2003-0256

HIGH

7.5

CVSS Severity Score

EPSS Score0.1220%

EPSS Percentile2.14th

PublishedMay 27, 2003

Last ModifiedApr 16, 2026

Vulnerability Description

The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.

Affected Platforms (CPE)

📦

Kde

Kopete

= 0.6.1

References & Advisories

🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665

🔗 http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:055

🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665

🔗 http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:055

Related Vulnerabilities

CVE-2005-18527.5

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and ...

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-030410.0

one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the inst...

CVE-2003-109010.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.