Ubuntu 12.04 LTS : kde-workspace vulnerabilities (USN-2402-1)

David Edmundson discovered that the KDE Clock KCM policykit helper did not properly guard against untrusted input. Under certain circumstances, a process running under the user's session could exploit this to run programs as the administrator. Note that Tenable Network Security has extracted the...

Ubuntu: Security Advisory (USN-2402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2014-8657

Name of the Vulnerable Software and Affected Versions kde-workspace versions prior to 4.11.14 plasma-desktop versions prior to 5.1.1 Description The issue allows local users to gain privileges via a crafted ntpUtility argument in the KDE Clock KCM policykit helper. Recommendations For kde-workspa...

CVE-2014-8651

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...