3017 matches found
CVE-2002-1224
Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...
CVE-2003-0988
CVE-2003-0988 affects KDE kdepim up to KDE 3.1.4; the buffer overflow is in the VCF file information reader, allowing arbitrary code execution via a crafted VCF file. Affected versions: KDE 3.1.0–3.1.4. The provided documents do not specify a fixed version or remediation details.
CVE-2002-1224
CVE-2002-1224 documents a directory traversal vulnerability in the KDE file preview component affecting KDE 3.0.1 through 3.0.3a. The flaw allows remote attackers to read arbitrary files as the kpf user by supplying a URL with a modified icon parameter. The available sources consistently describ...
CVE-2002-0970
Technical details about CVE-2002-0970 (affected software, affected component, exploit vectors, or fixes) are not provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2002-1152
CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...
CVE-2003-0988
Removed by vendor...
CVE-2002-1223
Technical details about CVE-2002-1223 are not publicly available in the provided connected documents. The OpenVAS/ENISA entries pertain to unrelated issues (Solaris Perl updates, malware mention) and do not supply product/version/impact data for this CVE. Monitor for updates.
GLSA-200404-02 : KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability
The remote host is affected by the vulnerability described in GLSA-200404-02 KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability A buffer overflow may occur in KDE-PIM's VCF file reader when a maliciously crafted VCF file is opened by a user on a vulnerable system. Impa...
GLSA-200405-11 : KDE URI Handler Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200405-11 KDE URI Handler Vulnerabilities The telnet, rlogin, ssh and mailto URI handlers in KDE do not check for '-' at the beginning of the hostname passed. By crafting a malicious URI and entice an user to click on it, it is...
KDE Security Advisory: Konqueror Cross-Domain Cookie Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection Original Release Date: 2004-08-23 URL: http://www.kde.org/info/security/advisory-20040823-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0746 1. Systems affecte...
kdelibs -- konqueror cross-domain cookie injection
According to a KDE Security Advisory: WESTPOINT internet reconnaissance services alerted the KDE security team that the KDE web browser Konqueror allows websites to set cookies for certain country specific secondary top level domains. Web sites operating under the affected domains can set HTTP...
Mandrake Linux Security Advisory : kdelibs/kdebase (MDKSA-2004:086)
A number of vulnerabilities were discovered in KDE that are corrected with these update packages. The integrity of symlinks used by KDE are not ensured and as a result can be abused by local attackers to create or truncate arbitrary files or to prevent KDE applications from functioning correctly...
CVE-2004-0689
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...
CVE-2004-0689
KDE before 3.3.0 is affected by CVE-2004-0689 where certain symbolic links point to stale locations, enabling local users to create or truncate arbitrary files through kde/kdelibs components. Public references in 2004 advisories (RHSA-2004:412, DSA-539-1, Gentoo GLSA 200408-13, FreeBSD/OpenVAS en...
DSA-539 kdelibs - denial of service
Bulletin has no description...
[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 539-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 539-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...
kdebase, kdelibs: Multiple security issues
Background KDE is a powerful Free Software graphical desktop environment for Linux and Unix-like Operating Systems. Description KDE contains three security issues: Insecure handling of temporary files when running KDE applications outside of the KDE environment DCOPServer creates temporary files ...
KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities
Three security advisories have been issued today for KDE. The first advisory concerns the unsafe handling of KDE's temporary directory in certain circumstances. The second advisory relates to the unsafe creation of temporary files by KDE 3.2.x's dcopserver . The third advisory is about a frame...