← Back

Ktsuss Project

ktsuss_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Ktsuss
ktsuss
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-2922
1Ktsuss Project
1Ktsuss
Nov 21, 2024
Nov 19, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.
CVE-2011-2921
1Ktsuss Project
1Ktsuss
Nov 21, 2024
Nov 19, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.