Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix a libXpm integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality...

security flaw

Desktop Communication Protocol DCOP daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service dcopserver consumption by "stalling the DCOP authentication process."...

GLSA-200503-22 : KDE: Local Denial of Service

The remote host is affected by the vulnerability described in GLSA-200503-22 KDE: Local Denial of Service Sebastian Krahmer discovered that it is possible to stall the dcopserver of other users. Impact : An attacker could exploit this to cause a local Denial of Service by stalling the dcopserver ...

KDE: Local Denial of service

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. DCOP is KDE's simple IPC/RPC mechanism. Description Sebastian Krahmer discovered that it is possible to stall the dcopserver of other users. Impact An attacker could exploit this to cause a...

CVE-2005-0396

Desktop Communication Protocol DCOP daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service dcopserver consumption by "stalling the DCOP authentication process."...

CVE-2005-0396

CVE-2005-0396 affects the DCOP daemon (dcopserver) in KDE prior to 3.4. A local attacker can stall the DCOP authentication process, causing a denial of service (dcopserver consumption) for nearby desktop users. Public sources in the connected documents describe this as a local DoS vulnerability t...

KDE desktop environment multiple bugs

Local Desktop Communication Protocol DCOP DoS, symbolic links problem in dcopidlng...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:058)

A vulnerability in dcopserver was discovered by Sebastian Krahmer of the SUSE security team. A local user can lock up the dcopserver of other users on the same machine by stalling the DCOP authentication process, causing a local Denial of Service. dcopserver is the KDE Desktop Communication...

Multiple KDE Security Advisories (2005-03-16)

Three KDE security advisories have been issued today. KDE Security Advisory: Local DCOP denial of service vulnerability Original Release Date: 20050316 URL: http://www.kde.org/info/security/advisory-20050316-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396 1. System...

security flaw

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...

kdelibs -- local DCOP denial of service vulnerability

A KDE Security Advisory reports: Sebastian Krahmer of the SUSE LINUX Security Team reported a local denial of service vulnerability in KDE's Desktop Communication Protocol DCOP daemon better known as dcopserver. A local user can lock up the dcopserver of arbitrary other users on the same machine...

[SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 692-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8th, 2005 http://www.debian.org/security/faq -...

GLSA-200503-14 : KDE dcopidlng: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200503-14 KDE dcopidlng: Insecure temporary file creation Davide Madrisan has discovered that the dcopidlng script creates temporary files in a world-writable directory with predictable names. Impact : A local attacker could creat...

DSA-692-1 kppp - design flaw

Bulletin has no description...

KDE dcopidlng: Insecure temporary file creation

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. DCOP is KDE's simple IPC/RPC mechanism. dcopidlng is a DCOP helper script. Description Davide Madrisan has discovered that the dcopidlng script creates temporary files in a world-writable...

CVE-2005-0205

CVE-2005-0205 affects KPPP 2.1.2 and earlier within KDE 3.1.5 and earlier. The issue is a local privilege problem where a setuid-root kppp can fail to close a privileged domain-socket file descriptor when wrappers are not used, enabling a local attacker to read/write /etc/hosts and /etc/resolv.co...

kppp KDE dialer file descriptors leak

File descriptors are leaked for /etc/hosts and /etc/resolv.conf...

KDE fliccd (INDI support) buffer overflows

Setuid root application buffer overflows...

CVE-2005-0011

Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface INDI in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows...

CVE-2005-0011

CVE-2005-0011 affects the KDE Education KDEedu KStars integration’s fliccd, where fliccd is installed as setuid root. The vulnerability stems from stack-based buffer overflows in fliccd, enabling root code execution via that binary when running with elevated privileges. Documents consistently des...