CVE-2002-1281

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-11-29 · updated 2026-06-16

Description

Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.

Affected products

Kde: 2.1, 2.1.1, 2.1.2, 2.2, 2.2.1, 2.2.2 (+5)

References

http://marc.info/?l=bugtraq&m=103712550205730&w=2
http://marc.info/?l=bugtraq&m=103728981029342&w=2
http://secunia.com/advisories/8298
http://www.debian.org/security/2002/dsa-204
http://www.iss.net/security_center/static/10602.php
http://www.kde.org/info/security/advisory-20021111-1.txt
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php
http://www.redhat.com/support/errata/RHSA-2002-220.html
http://www.securityfocus.com/bid/6182
http://marc.info/?l=bugtraq&m=103712550205730&w=2

Get alerted when CVE-2002-1281 or the next vulnerability affects your stack