Check login, sshd, gdm, xdm and kde PAM Config

This plugin uses ssh to Check login, sshd, gdm, xdm and kde PAM Config. This Script will check if pamlastlog.so, pamlimits.so and pamtally.so in /etc/pam.d/login, /etc/pam.d/sshd, /etc/pam.d/gdm, /etc/pam.d/xdm and /etc/pam.d/kde set. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptio...

Security fix for the ALT Linux 8 package qt4 version 4.6.2-alt3

May 19, 2010 Sergey V Turchin 4.6.2-alt3 - update kde-qt patches - add cups fixes - add fixes for CVE-2010-0047 CVE-2010-0051 CVE-2010-0054 CVE-2010-0648 CVE-2010-0656 CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 ALT23506...

Mandriva Linux Security Advisory : kdenetwork4 (MDVSA-2010:098)

Multiple vulnerabilities has been discovered and fixed in kget kdenetwork4 : Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

CVE-2010-1000

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...

Cross site request forgery (csrf)

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...

Directory traversal

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

CVE-2010-1000

CVE-2010-1000 affects KDE SC KGet (KDENETWORK) with directory traversal in the metalink file’s name attribute, enabling remote attackers to create arbitrary files via crafted metalink entries. Affected: KDE SC 4.0.0–4.4.3; vulnerability in KGetMetalink::File::isValidNameAttr. Impact: potential ar...

CVE-2010-1511

CVE-2010-1511 affects KGet 2.4.2 within KDE SC 4.0.0–4.4.3. The flaw arises from not properly requesting download confirmation when processing a metalink, enabling a remote attacker to overwrite arbitrary files via a crafted metalink. CVSS metrics from NVD indicate Network access, Low attack comp...

CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...

CVE-2010-1000

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

Secunia Research: KDE KGet Insecure File Operation Vulnerability

====================================================================== Secunia Research 13/05/2010 - KDE KGet Insecure File Operation Vulnerability - ====================================================================== Table of Contents Affected...

KDE KGet files overwrite

It's possible to overwrite files via metalink file...

CVE-2010-1511

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...

Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability

====================================================================== Secunia Research 13/05/2010 - KDE KGet metalink "name" Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...

USN-938-1: KDENetwork vulnerabilities

It was discovered that KGet did not properly perform input validation when processing metalink files. If a user were tricked into opening a crafted metalink file, a remote attacker could overwrite files via directory traversal, which could eventually lead to arbitrary code execution. CVE-2010-100...

CVE-2010-1000

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...

RHEL 4 / 5 : kdebase (RHSA-2010:0348)

Updated kdebase packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

xpdf/poppler: ImageStream:: ImageStream integer overflow

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service application crash via a crafted PDF document that triggers a NULL...

CentOS Update for kdebase CESA-2010:0348 centos4 i386

Check for the Version of kdebase OpenVAS Vulnerability Test CentOS Update for kdebase CESA-2010:0348 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...