[SECURITY] Fedora 10 Update: kdelibs3-3.5.10-13.fc10.1

Libraries for the K Desktop Environment 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

[SECURITY] Fedora 11 Update: kdelibs3-3.5.10-13.fc11.1

Libraries for the K Desktop Environment 3: KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling checker, jscript javascript, kab addressbook, kimgio image manipulation...

Fedora 11 : kdelibs3-3.5.10-13.fc11.1 (2009-9391)

This update fixes CVE-2009-2702, a security issue where SSL certificates containing embedded NUL characters would falsely pass validation when they're actually invalid, for the KDE 3 compatibility version of kdelibs. Note that Tenable Network Security has extracted the preceding description block...

CVE-2009-2702

KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certificatio...

Design/Logic Flaw

KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certificatio...

CVE-2009-2702

KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certificatio...

CVE-2009-2702

CVE-2009-2702 affects KDE KSSL in kdelibs (versions 3.5.4, 4.2.4, 4.3). The issue is improper handling of a '\0' character in the domain name within the Subject Alternative Name (SAN) field of an X.509 certificate, enabling MITM attackers to spoof SSL servers via a certificate issued by a trusted...

CVE-2009-2702

Removed by vendor...

CVE-2009-2702

KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certificatio...

Debian Security Advisory DSA 1867-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 1867-1. OpenVAS Vulnerability Test $Id: deb18671.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1867-1 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ubuntu: Security Advisory (USN-823-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MDVA-2009:156 : kde4

KDE 3 multiple removal fix Some packages from KDE 4 updates remove partial KDE 3 installation. New update packages has been built with proper removed obsoletes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Ubuntu 8.04 LTS / 8.10 / 9.04 : kde4libs, kdelibs vulnerabilities (USN-822-1)

It was discovered that KDE-Libs did not properly handle certain malformed SVG images. If a user were tricked into opening a specially crafted SVG image, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. This issue...

USN-823-1: KDE-Graphics vulnerabilities

It was discovered that KDE-Graphics did not properly handle certain malformed SVG images. If a user were tricked into opening a specially crafted SVG image, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

USN-822-1: KDE-Libs vulnerabilities

It was discovered that KDE-Libs did not properly handle certain malformed SVG images. If a user were tricked into opening a specially crafted SVG image, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. This issue...

[SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1866-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 19, 2009 http://www.debian.org/security/faq -...

DSA-1867-1 kdelibs - several vulnerabilities

Bulletin has no description...

Fedora 11 : subversion-1.6.4-2.fc11 (2009-8449)

This update includes the latest stable release of Subversion, fixing many bugs and a security issue: Matt Lewis reported multiple heap overflow flaws in Subversion servers and clients when parsing binary deltas. Malicious users with commit access to a vulnerable server could uses these flaws to...

KDE Konqueror Version Detection

Detects the installed version of KDE Konqueror. The script logs in via ssh, searches for executable Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

KDE Konqueror Select Object Denial of Service Vulnerability

KDE Konqueror is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kde:konqueror";...