3017 matches found
CentOS 4 : kdelibs (CESA-2005:393)
Updated kdelibs packages that fix a flaw in kimgio input validation are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. KDE is a graphical desktop environment for the X Window System. Konqueror is...
CentOS 3 / 4 : kdelibs (CESA-2005:307)
Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment. Sebastian Krahmer discovered a flaw in...
Slackware 10.0 / 10.1 / 10.2 / current : kdebase kdm local file reading vulnerability (SSA:2006-178-01)
New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...
kdebase kdm local file reading vulnerability
New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...
KDM: Symlink vulnerability
Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KDM is the KDE Display Manager and is part of the kdebase package. Description Ludwig Nussel discovered that KDM could be tricked into allowing users to read files that would otherwise not be...
kdebase security update
CentOS Errata and Security Advisory CESA-2006:0548 Updated kdebase packages that correct a security flaw in kdm are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdebase packages provide the...
Sql injection
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
CVE-2006-2449
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
CVE-2006-2449
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
CVE-2006-2449
The CVE-2006-2449 entry concerns KDE Display Manager (KDM) in KDE 3.2.0 through 3.5.3. The issue arises from how KDM handles the session type for login, allowing a local attacker to read arbitrary files via a symlink attack to the session configuration. The vulnerability is local in scope and doe...
CVE-2006-2449
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
DSA-1062-1 kphone - insecure file creation
Bulletin has no description...
FreeBSD : kpdf -- heap based buffer overflow (432bf98d-9e25-11da-b410-000e0c2e438a)
The KDE team reports : kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a heap based buffer overflow in the splash rasterizer engine that can crash kpdf or even execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...
CVE-2005-4784
Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...
[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...
DSA-1023-1 kaffeine - buffer overflow
Bulletin has no description...
kaffeine -- buffer overflow vulnerability
The KDE team reports: Kaffeine can produce a buffer overflow in httppeek while creating HTTP request headers for fetching remote playlists, which under certain circumstances could be used to crash the application and/or execute arbitrary code...
[SECURITY] [DSA 1019-1] New kpdf packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1019-1 [email protected] http://www.debian.org/security/ Martin Schulze March 24th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1019-1] New kpdf packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1019-1 [email protected] http://www.debian.org/security/ Martin Schulze March 24th, 2006 http://www.debian.org/security/faq -...