CVE:CVE-2001-0178
CNNVD:CNNVD-200103-093
KDE2 (KDE 2.2.0-6之前的版本)的kdesu程序不正确核实发送密码的UNIX接口所有者，本地用户可以利用该漏洞窃取密码并提升权限。
solution:Upgrade conectiva linux to a higher version than 6.0,and avoid the version 6.0; Upgrade caldera openlinux_edesktop to a higher version than 2.4,and avoid the version 2.4; Upgrade mandrakesoft mandrake_linux to a higher version than 6.1,7.0,7.1,7.2,and avoid the version 6.1,7.0,7.1,7.2; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade suse suse_linux to a higher version than 6.0,6.1,6.2,6.3,6.4,7.0,and avoid the version 6.0,6.1,6.2,6.3,6.4,7.0