3017 matches found
CVE-2005-2494
CVE-2005-2494 affects KDE kdebase/kcheckpass (kcheckpass in KDE 3.2.0 up to 3.4.2) where a symlink attack on /var/lock lock files can allow a local user to gain root privileges. Root cause: improper lock-file handling in kcheckpass. Affected environments include Red Hat/CentOS, Debian, Ubuntu adv...
CVE-2005-2101
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...
CVE-2005-2101
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...
CVE-2005-2101
CVE-2005-2101 affects KDE kdeedu: specifically the langen2kvtml script in the kvoctrain component creates insecure temporary files in /tmp with predictable names, allowing a local attacker to overwrite arbitrary files. Multiple vendors/advisories (Debian DSA-818-1, Mandrake/MKSA-2005:159, SUSE, O...
CVE-2005-2101
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...
KDE langen2kvtml symbolic links problem
Insecure temporary file creation...
[SA16428] KDE langen2kvtml Insecure Temporary File Creation
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
kdelibs security update
CentOS Errata and Security Advisory CESA-2005:612 Updated kdelibs packages are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. kdelibs contains libraries for the K Desktop Environment. A flaw was...
CVE-2005-1920
The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...
CVE-2005-1920
The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...
CVE-2005-1920
The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...
CVE-2005-1852
CVE-2005-1852 describes multiple integer overflows in libgadu used by Kopete (KDE 3.2.3–3.4.1), ekg, GNU Gadu, CenterICQ, Kadu and other packages. These flaws allow a remote attacker to crash the affected application and potentially execute arbitrary code by sending a crafted Gadu-Gadu message. P...
CVE-2005-1852
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...
CVE-2005-1920
The CVE-2005-1920 issue affects KDE 3.2.x–3.4.0 (kdelibs3/kdebase); backup files could have improper permissions, allowing local users to access sensitive data. Connected advisories (e.g., Debian DSA-804-2, Red Hat RHSA-2005:612, Ubuntu USN-150-1, Gentoo GLSA 200611-21) document security updates ...
CVE-2005-1852
Removed by vendor...
kdenetwork security update
CentOS Errata and Security Advisory CESA-2005:639 Updated kdenetwork packages to correct a security flaw in Kopete are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdenetwork package contains...
USN-150-1: KDE library vulnerability
Kate and Kwrite create a backup file before saving a modified file. These backup files were created with default permissions, even if the original file had more strict permissions set, so that other local users could possibly read the backup file even if they are not permitted to read the origina...
[KDE Security Advisory]: Kate backup file permission leak
KDE Security Advisory: Kate backup file permission leak Original Release Date: 2005-07-18 URL: http://www.kde.org/info/security/advisory-20050718-1.txt 0. References CVE CAN-2005-1920 https://bugs.kde.org/showbug.cgi?id=103331 1. Systems affected: All maintained versions of Kate and Kwrite as...
kdebase -- Kate backup file permission leak
A KDE Security Advisory explains: Kate / Kwrite create a file backup before saving a modified file. These backup files are created with default permissions, even if the original file had more strict permissions set. Depending on the system security settings, backup files might be readable by othe...