CVE-2002-1281

Unknown vulnerability in the rlogin KIO subsystem rlogin.protocol of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1282

Unknown vulnerability in the telnet KIO subsystem telnet.protocol of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1306

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow 1 local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and 2 remote attackers to execute arbitrary code via a certain "lan://" URL...

CVE-2002-1306

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow 1 local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and 2 remote attackers to execute arbitrary code via a certain "lan://" URL...

CVE-2002-1306

CVE-2002-1306 corresponds to buffer overflow vulnerabilities in KDE’s LISa network services. The issues affect the LISa daemon used for LAN discovery (local network) and the LAN URL handler, allowing both local and remote attackers to potentially execute arbitrary code. Public references from SUS...

CVE-2002-1281

Unknown vulnerability in the rlogin KIO subsystem rlogin.protocol of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1282

Unknown vulnerability in the telnet KIO subsystem telnet.protocol of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1282

CVE-2002-1282 concerns KDE’s KIO telnet protocol (telnet.protocol) in KDE 2.x; a crafted URL can cause arbitrary commands to execute with the victim’s privileges. The related KDE rlogin/telnet KIO vulnerabilities allow local/remote exploitation via HTML pages or KIO-enabled apps. Remediation per ...

CVE-2002-1281

CVE-2002-1281 is a KDE KIO rlogin/telnet protocol vulnerability. The KDE 2.x releases (2.1 and later) and KDE 3.x up to 3.0.4 allow a crafted URL in an HTML page, email, or other KIO-enabled app to execute arbitrary commands with the victim’s account, enabling local or remote code execution. Publ...

Format string vulnerability in KDE talkd

No description provided...

iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.11.02: http://www.idefense.com/advisory/11.11.02.txt Buffer Overflow in KDE resLISa November 11, 2002 I. BACKGROUND KDE is a popular open source graphical desktop environment for Unix workstations. Its kdenetwork module...

KDE resLISa buffer overflow

Buffer overflow on oversized LOGNAME environment variable...

[SECURITY] [DSA 182-1] New kghostview packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 182-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2002 http://www.debian.org/security/faq -...

CVE-2002-1224

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter...

DSA-182 kdegraphics - buffer overflow

Bulletin has no description...

Multiple KDE bugs

KGhostview buffer overflow, kpf directory traversal...

Security hole in kpf - KDE personal fileserver.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY ADVISORY Author: Ajay R Ramjatan [email protected] Date: 11 October 2002 Software: kpf - KDE Personal File Server part of kdenetwork Vulnerable: kpf of any KDE release between KDE 3.0.1 and KDE 3.0.3a Fixed: kpf from kdenetwork 3.0.4...

KDE Security Advisory: kpf Directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: kpf Directory traversal Original Release Date: 2002-10-08 URL: http://www.kde.org/info/security/advisory-20021008-2.txt 0. References 1. Systems affected: kpf of any KDE release between KDE 3.0.1 and KDE 3.0.3a. 2. Overview: kpf...

KDE Security Advisory: KGhostview Arbitary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: KGhostview Arbitary Code Execution Original Release Date: 2002-10-08 URL: http://www.kde.org/info/security/advisory-20021008-1.txt 0. References cve.mitre.org: CAN-2002-0838 BUGTRAQ:20020926 iDEFENSE Security Advisory 09.26.2002...

KDE 3.0.x - KPF Icon Option File Disclosure

source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files...