Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD4472AB39-6C66-11E6-9CA5-50E549EBAB6C
HistoryJul 24, 2016 - 12:00 a.m.

kdelibs -- directory traversal vulnerability

2016-07-2400:00:00
vuxml.freebsd.org
13

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.4%

JSON

David Faure reports:

A maliciously crafted archive (.zip or .tar.bz2) with “…/” in the
file paths could be offered for download via the KNewStuff
framework (e.g. on www.kde-look.org), and upon extraction would
install files anywhere in the user’s home directory.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchkdelibs< 4.14.10_7UNKNOWN

Related

fedora 94
nessus 4
ubuntu 1
openvas 92
debian 3
suse 2
cve 1
prion 1
ubuntucve 1
fedora
fedora
[SECURITY] Fedora 24 Update: kf5-kbookmarks-5.24.0-1.fc24
2016-07-23 19:07:11
[SECURITY] Fedora 24 Update: kf5-kxmlrpcclient-5.24.0-1.fc24
2016-07-23 19:07:10
[SECURITY] Fedora 24 Update: kf5-ktextwidgets-5.24.0-1.fc24
2016-07-23 19:07:13
nessus
nessus
openSUSE Security Update : karchive (openSUSE-2016-904)
2016-07-28 00:00:00
Debian DSA-3643-1 : kde4libs - security update
2016-08-08 00:00:00
FreeBSD : kdelibs -- directory traversal vulnerability (4472ab39-6c66-11e6-9ca5-50e549ebab6c)
2016-08-29 00:00:00
ubuntu
ubuntu
KDE-Libs vulnerability
2016-07-26 00:00:00
openvas
openvas
Fedora Update for kf5-knotifyconfig FEDORA-2016-cef912e3a4
2016-08-02 00:00:00
Fedora Update for kf5-kwindowsystem FEDORA-2016-4701636a74
2016-08-02 00:00:00
Fedora Update for kf5-kjsembed FEDORA-2016-cef912e3a4
2016-08-02 00:00:00
debian
debian
[SECURITY] [DSA 3643-1] kde4libs security update
2016-08-06 19:53:30
[SECURITY] [DLA 570-1] kde4libs security update
2016-07-30 00:07:02
[SECURITY] [DSA 3643-1] kde4libs security update
2016-08-06 19:53:30
suse
suse
Security update for karchive (important)
2016-09-02 15:13:34
Security update for karchive (important)
2016-07-27 19:08:42
cve
cve
CVE-2016-6232
2016-08-02 16:59:00
prion
prion
Directory traversal
2016-08-02 16:59:00
ubuntucve
ubuntucve
CVE-2016-6232
2016-07-18 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.4%

JSON
Related for 4472AB39-6C66-11E6-9CA5-50E549EBAB6C
fedora94nessus4ubuntu1openvas92debian3suse2cve1prion1ubuntucve1