security flaw

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...

Shortcuts may insecurely store SMB authentication information

Overview SMB authentication information may be stored as plain text within URI shortcuts. As a result, a local attacker may be able read the authentication information and gain access to the share. Description SMB is a protocol for sharing data and resources between computers. Many operating...

RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)

Updated kdelib and kdebase packages that resolve multiple security issues are now available. The kdelibs packages include libraries for the K Desktop Environment. The kdebase packages include core applications for the K Desktop Environment. Andrew Tuitt reported that versions of KDE up to and...

security flaw

KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...

Debian DSA-243-1 : kdemultimedia - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-239-1 : kdesdk - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-240-1 : kdegames - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-237-1 : kdenetwork - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-241-1 : kdeutils - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-235-1 : kdegraphics - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-236-1 : kdelibs - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

Debian DSA-242-1 : kdebase - several vulnerabilities

The KDE team discovered several vulnerabilities in the K Desktop Environment. In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution. These parameters may incorporate data such as URLs, filenames and e-mail addresses, and this data may be...

PT-2004-1773 · Kde · Kde

Name of the Vulnerable Software and Affected Versions: KDE versions prior to 3.3.0 Description: The issue arises from improper handling of certain symbolic links that point to 'stale' locations. This could allow local users to create or truncate arbitrary files. Recommendations: For versions prio...

RHEL 2.1 / 3 : gdk-pixbuf (RHSA-2004:103)

Updated gdk-pixbuf packages that fix a crash are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. Thomas Kristensen discovered a bitmap file that would cause versions of gdk-pixbuf prior to 0.20 to crash. To exploit this flaw, an...

RHEL 2.1 : kdelibs (RHSA-2003:236)

This erratum provides updated KDE packages that resolve a security issue in Konquerer. KDE is a graphical desktop environment for the X Window System. Konqueror is the file manager for the K Desktop Environment. George Staikos reported that Konqueror may inadvertently send authentication...

PT-2004-1550 · Kde +1 · Konqueror +2

Name of the Vulnerable Software and Affected Versions: KDE versions 3.2.2 and earlier Description: The issue is related to the URI handlers in Konqueror, which do not properly filter "-" characters that begin a hostname in certain URIs, such as telnet, rlogin, ssh, or mailto. This allows remote...

Important: Red Hat Security Advisory: kdepim security update

Updated kdepim packages are now available that fix a local buffer overflow vulnerability. The K Desktop Environment KDE is a graphical desktop for the X Window System. The KDE Personal Information Management kdepim suite helps you to organize your mail, tasks, appointments, and contacts. The KDE...

security flaw

Buffer overflow in the VCF file information reader for KDE Personal Information Management kdepim suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file...

[Full-Disclosure] UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow

To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : CDE libDtHelp buffer overflow Advisory number: CSSA-2003-SCO.31 Issue date: 2003 October 31 Cross reference: sr885326 fz528372 erg71244...

CDE libDtHelp vulnerable to buffer overflow via DTHELPUSERSEARCHPATH or DTHELPSEARCHPATH

Overview There is a vulnerability in the Common Desktop Environment CDE for UNIX systems which can allow a local user to gain root privileges. Description The Common Desktop Environment CDE is a standard desktop environment for UNIX based systems. CDE libDtHelp contains a buffer overflow that can...