CVE-2014-2528

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' single quote character in the directory name, a different vulnerability than CVE-2014-2527...

CVE-2014-2527

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " double quote character in the directory name, a different vulnerability than CVE-2014-2528...

CVE-2014-2528

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' single quote character in the directory name, a different vulnerability than CVE-2014-2527...

PT-2014-4763

Name of the Vulnerable Software and Affected Versions KDirStat version 2.7.3 Description The issue arises from improper string quoting in the directory deletion process, allowing remote attackers to execute arbitrary commands by including a ' single quote character in the directory name...

CVE-2014-2527: Undefined Security Weakness

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " double quote character in the directory name, a different vulnerability than CVE-2014-2528...

CVE-2014-2528: Undefined Security Weakness

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' single quote character in the directory name, a different vulnerability than CVE-2014-2527...

openSUSE Security Update : kdirstat (openSUSE-SU-2014:0984-1)

The following security fixes are fixed in this update : - command injection CVE-2014-2528 with patch from upstream bnc868682 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-489...

SuSE 11.3 Security Update : kdirstat (SAT Patch Number 9515)

The following security issue has been fixed : - 868682: CVE-2014-2527 / CVE-2014-2528: kdirstat: command injection in kcleanup %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

GLSA-201406-15 : KDirStat: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-201406-15 KDirStat: Arbitrary command execution Missing escape of executable shell command in KDirStat can be used to insert malicious shell commands. Impact : A local attacker could possibly execute arbitrary shell command with t...

PT-2014-1903

Name of the Vulnerable Software and Affected Versions KDirStat versions prior to 2.7.5 Description The issue allows remote attackers to execute arbitrary commands, potentially leading to a breach of confidentiality, integrity, and availability of protected information. In KDirStat 2.7.0, the...

KDirStat: Arbitrary command execution

Background KDirStat is a graphical disk usage utility for KDE. Description Missing escape of executable shell command in KDirStat can be used to insert malicious shell commands. Impact A local attacker could possibly execute arbitrary shell command with the privileges of the process. Workaround...

[SECURITY] Fedora 19 Update: k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc19

KDirStat KDE Directory Statistics is a utility program that sums up disk usage for directory trees - very much like the Unix 'du' command. It can also help you clean up used space. K4DirStat is the port to KDE4...