Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2004-2021 Tenable Network Security, Inc.MANDRAKE_MDKSA-2004-086.NASL
HistoryAug 22, 2004 - 12:00 a.m.

Mandrake Linux Security Advisory : kdelibs/kdebase (MDKSA-2004:086)

2004-08-2200:00:00
This script is Copyright (C) 2004-2021 Tenable Network Security, Inc.
www.tenable.com
14
JSON

A number of vulnerabilities were discovered in KDE that are corrected with these update packages.

The integrity of symlinks used by KDE are not ensured and as a result can be abused by local attackers to create or truncate arbitrary files or to prevent KDE applications from functioning correctly (CVE-2004-0689).

The DCOPServer creates temporary files in an insecure manner. These temporary files are used for authentication-related purposes, so this could potentially allow a local attacker to compromise the account of any user running a KDE application (CVE-2004-0690). Note that only KDE 3.2.x is affected by this vulnerability.

The Konqueror web browser allows websites to load web pages into a frame of any other frame-based web page that the user may have open.
This could potentially allow a malicious website to make Konqueror insert its own frames into the page of an otherwise trusted website (CVE-2004-0721).

The Konqueror web browser also allows websites to set cookies for certain country-specific top-level domains. This can be done to make Konqueror send the cookies to all other web sites operating under the same domain, which can be abused to become part of a session fixation attack. All country-specific secondary top-level domains that use more than 2 characters in the secondary part of the domain name, and that use a secondary part other than com, net, mil, org, gove, edu, or int are affected (CVE-2004-0746).

#%NASL_MIN_LEVEL 70300

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Mandrake Linux Security Advisory MDKSA-2004:086. 
# The text itself is copyright (C) Mandriva S.A.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(14335);
  script_version("1.23");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");

  script_cve_id("CVE-2004-0689", "CVE-2004-0690", "CVE-2004-0721", "CVE-2004-0746");
  script_xref(name:"MDKSA", value:"2004:086");

  script_name(english:"Mandrake Linux Security Advisory : kdelibs/kdebase (MDKSA-2004:086)");
  script_summary(english:"Checks rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Mandrake Linux host is missing one or more security
updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"A number of vulnerabilities were discovered in KDE that are corrected
with these update packages.

The integrity of symlinks used by KDE are not ensured and as a result
can be abused by local attackers to create or truncate arbitrary files
or to prevent KDE applications from functioning correctly
(CVE-2004-0689).

The DCOPServer creates temporary files in an insecure manner. These
temporary files are used for authentication-related purposes, so this
could potentially allow a local attacker to compromise the account of
any user running a KDE application (CVE-2004-0690). Note that only KDE
3.2.x is affected by this vulnerability.

The Konqueror web browser allows websites to load web pages into a
frame of any other frame-based web page that the user may have open.
This could potentially allow a malicious website to make Konqueror
insert its own frames into the page of an otherwise trusted website
(CVE-2004-0721).

The Konqueror web browser also allows websites to set cookies for
certain country-specific top-level domains. This can be done to make
Konqueror send the cookies to all other web sites operating under the
same domain, which can be abused to become part of a session fixation
attack. All country-specific secondary top-level domains that use more
than 2 characters in the secondary part of the domain name, and that
use a secondary part other than com, net, mil, org, gove, edu, or int
are affected (CVE-2004-0746)."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.kde.org/info/security/advisory-20040811-1.txt"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.kde.org/info/security/advisory-20040811-2.txt"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.kde.org/info/security/advisory-20040811-3.txt"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.kde.org/info/security/advisory-20040820-1.txt"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kate");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kcontrol-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kdeprintfax");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kdm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kdm-config-file");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-kmenuedit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-konsole");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-nsplugins");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdebase-progs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:kdelibs-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-kate");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-kate-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-kmenuedit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-konsole");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-nsplugins");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdebase4-nsplugins-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdecore4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64kdecore4-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-kate");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-kate-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-kmenuedit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-konsole");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-nsplugins");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdebase4-nsplugins-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdecore4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libkdecore4-devel");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mandrakesoft:mandrake_linux:10.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mandrakesoft:mandrake_linux:9.2");

  script_set_attribute(attribute:"patch_publication_date", value:"2004/08/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2004/08/22");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2004-2021 Tenable Network Security, Inc.");
  script_family(english:"Mandriva Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux");
if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu);


flag = 0;
if (rpm_check(release:"MDK10.0", reference:"kdebase-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-common-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kate-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kcontrol-data-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kdeprintfax-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kdm-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kdm-config-file-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-kmenuedit-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-konsole-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-nsplugins-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdebase-progs-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", reference:"kdelibs-common-3.2-36.3.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-kate-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-kate-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-kmenuedit-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-konsole-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-nsplugins-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdebase4-nsplugins-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdecore4-3.2-36.3.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"amd64", reference:"lib64kdecore4-devel-3.2-36.3.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-kate-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-kate-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-kmenuedit-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-konsole-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-nsplugins-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdebase4-nsplugins-devel-3.2-79.2.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdecore4-3.2-36.3.100mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK10.0", cpu:"i386", reference:"libkdecore4-devel-3.2-36.3.100mdk", yank:"mdk")) flag++;

if (rpm_check(release:"MDK9.2", reference:"kdebase-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-common-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-kate-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-kdeprintfax-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-kdm-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-kdm-config-file-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-konsole-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-nsplugins-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdebase-progs-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", reference:"kdelibs-common-3.1.3-35.3.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-kate-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-kate-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-konsole-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-nsplugins-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdebase4-nsplugins-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdecore4-3.1.3-35.3.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"amd64", reference:"lib64kdecore4-devel-3.1.3-35.3.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-kate-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-kate-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-konsole-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-nsplugins-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdebase4-nsplugins-devel-3.1.3-79.2.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdecore4-3.1.3-35.3.92mdk", yank:"mdk")) flag++;
if (rpm_check(release:"MDK9.2", cpu:"i386", reference:"libkdecore4-devel-3.1.3-35.3.92mdk", yank:"mdk")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
VendorProductVersionCPE
mandrivalinuxkdebasep-cpe:/a:mandriva:linux:kdebase
mandrivalinuxkdebase-commonp-cpe:/a:mandriva:linux:kdebase-common
mandrivalinuxkdebase-katep-cpe:/a:mandriva:linux:kdebase-kate
mandrivalinuxkdebase-kcontrol-datap-cpe:/a:mandriva:linux:kdebase-kcontrol-data
mandrivalinuxkdebase-kdeprintfaxp-cpe:/a:mandriva:linux:kdebase-kdeprintfax
mandrivalinuxkdebase-kdmp-cpe:/a:mandriva:linux:kdebase-kdm
mandrivalinuxkdebase-kdm-config-filep-cpe:/a:mandriva:linux:kdebase-kdm-config-file
mandrivalinuxkdebase-kmenueditp-cpe:/a:mandriva:linux:kdebase-kmenuedit
mandrivalinuxkdebase-konsolep-cpe:/a:mandriva:linux:kdebase-konsole
mandrivalinuxkdebase-nspluginsp-cpe:/a:mandriva:linux:kdebase-nsplugins
Rows per page:
1-10 of 341

Related

openvas 16
nessus 13
slackware 1
securityvulns 3
redhat 1
freebsd 3
cve 5
cert 1
cvelist 5
debian 2
osv 1
prion 1
suse 1
openvas
openvas
Slackware Advisory SSA:2004-247-01 kde
2012-09-11 00:00:00
Slackware: Security Advisory (SSA:2004-247-01)
2012-09-10 00:00:00
Gentoo Security Advisory GLSA 200408-13 (kde, kdebase, kdelibs)
2008-09-24 00:00:00
nessus
nessus
Slackware 10.0 / 9.1 / current : kde (SSA:2004-247-01)
2005-07-13 00:00:00
Fedora Core 2 : kdebase-3.2.2-6.FC2 (2004-293)
2004-09-09 00:00:00
Fedora Core 1 : kdebase-3.1.4-7 (2004-292)
2004-09-09 00:00:00
slackware
slackware
[slackware-security] kde
2004-09-04 05:01:35
securityvulns
securityvulns
KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities
2004-08-12 00:00:00
KDE Security Advisory: Konqueror Cross-Domain Cookie Injection
2004-08-25 00:00:00
wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities
2004-09-17 00:00:00
redhat
redhat
(RHSA-2004:412) kdelibs, kdebase security update
2004-10-05 00:00:00
freebsd
freebsd
kdelibs insecure temporary file handling
2004-08-11 00:00:00
kdelibs -- konqueror cross-domain cookie injection
2004-08-23 00:00:00
Mutiple browser frame injection vulnerability
2004-08-11 00:00:00
cve
cve
CVE-2004-0690
2004-09-28 04:00:00
CVE-2004-0721
2004-07-27 04:00:00
CVE-2004-0689
2004-09-28 04:00:00
cert
cert
KDE DCOPServer insecurely creates temporary files
2004-09-07 00:00:00
cvelist
cvelist
CVE-2004-0690
2004-09-14 04:00:00
CVE-2004-0721
2004-07-23 04:00:00
CVE-2004-0689
2004-08-19 04:00:00
debian
debian
[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
2004-08-17 10:37:34
[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
2004-08-17 00:00:00
osv
osv
kdelibs - denial of service
2004-08-17 00:00:00
prion
prion
Cross site scripting
2008-07-14 23:41:00
suse
suse
remote file disclosure in samba
2004-10-05 14:57:32
JSON
Related for MANDRAKE_MDKSA-2004-086.NASL
openvas16nessus13slackware1securityvulns3redhat1freebsd3cve5cert1cvelist5debian2osv1prion1suse1