3017 matches found
CVE-1999-1269
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file...
CVE-1999-1106
CVE-1999-1106 affects KDE’s kppp: a buffer overflow in the -c (account_name) argument parsing can allow a local user to gain root privileges. Affected component: kppp within KDE. Root cause: unchecked/buffer overrun when handling long account_name strings via the -c option. Impact: local privileg...
CVE-1999-1269
CVE-1999-1269 affects KDE beta 3 screen savers. The root cause is a symlink attack on the .kss.pid file, allowing local users to overwrite arbitrary files. Exploitation details are not provided in the connected documents, and no remediation/patch information is included here.
CVE-1999-1347
CVE-1999-1347 affects Red Hat Linux 6.1 and earlier. The vulnerability arises in Xsession, where local users with restricted accounts can bypass execution of the .xsession file by starting a desktop session (KDE, GNOME or similar) from KDM. This bypass allows the user to run with the environmenta...
CVE-1999-1268
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...
CVE-1999-1107
The CVE-1999-1107 entry describes a local buffer overflow in KDE’s kppp, triggered by a long PATH environment variable, enabling local users to gain root access. The affected component is kppp within KDE; the underlying cause is a buffer overflow related to PATH handling. The provided references ...
CVE-1999-1096
The CVE-1999-1096 entry describes a local privilege escalation affecting KDE kscreensaver (klock) caused by a buffer overflow triggered by an excessively long HOME environment variable. The vulnerability allows local users to gain root privileges. Affected component: kscreensaver/klock; root caus...
CVE-1999-1270
KMail in KDE 1.0 exposes a PGP passphrase as a command-line argument to other programs. This allows local users to view the passphrase via process listing (e.g., ps) and potentially compromise the PGP keys of other users. Affected component: KMail (KDE 1.0); root cause: passphrase passed as comma...
CVE-1999-1267
CVE-1999-1267 concerns the KDE file manager (kfm), which exposes a TCP server for certain file operations. According to the description and linked records, a remote attacker can modify arbitrary files by sending a copy command to this server. The vulnerability is categorized with a NVD base score...
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp...
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp...
CVE-2001-0610
CVE-2001-0610 affects KDE’s KFM (KDE File Manager) when used with KDE 1.x. A local attacker can exploit a symlink attack in KFM’s per-user cache directory under /tmp, where the directory is created without proper ownership checks or existence verification. This insecure handling enables potential...
KDE KTVision 0.1 - File Overwrite
KDE KTVision 0.1 - File Overwrite source: https://www.securityfocus.com/bid/2913/info KTVision works with frame-grabber cards and KDE Unix K Desktop Environment to support TV video display on the PC screen. KTVision is vulnerable to symbolic link attacks. It is possible for an attacker to...
KDE KFM creates temporary files insecurely
Overview KDE's kfm creates and uses temporary cache directories insecurely. Description kfm, the KDE File Manager, creates a cache directory for each user. This directory is placed in /tmp and predictably named, based on the UID. These directories are created without checking for correct ownershi...
Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs
Overview KApplication-class, a class used to create KDE applications, creates configuration files without checking for proper ownership or prior existence. Description KApplication-class, a class used to create KDE applications, creates configuration files. These files are created in a local...
CVE-2001-0178
CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...
CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...
Linux news 14.12.00
Ядро 2.2.18 Наконец-то вышло следующее стабильное ядро из ветки 2.2. Подробнее: http://www.kernel.org/pub/linux/kernel/v2.2/linux-2.2.18.log Linux Kernel 2.4.0-test12 is out Вышла новая тестовая версия ядра линух 2.4.0 Подробнее: http://dredd.crimea.edu/linuxnews/test12.txt Ядро 2.4.0-test13-pre1...
CVE-2000-0918
The CVE-2000-0918 entry describes a format string vulnerability in KDE's kvt component (version 1.1.2) that may allow local users to execute arbitrary commands via a DISPLAY environment variable containing formatting characters. The affected software is KDE 1.1.2; root cause is unsafe format-stri...