3163 matches found
CVE-2000-0481: Undefined Security Weakness
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name...
CVE-2000-0530: Undefined Security Weakness
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...
kvt format bug
kdebase-1.1.2 xsetup.c:229 displayname = getenv"DISPLAY"; command.c:1720 extern char displayname; command.c:1840 cprintfdisplayname; command.c:1464 void cprintfunsigned char fmt,... Patch attached. -- Carlos E Gorges [email protected] Tech informбtica LTDA Brazil...
Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...
CVE-2000-0373
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges...
CVE-2000-0393
The CVE-2000-0393 issue affects the KDE kscd program. It does not drop privileges when executing a program specified in a user’s SHELL environment variable, allowing a local user to gain privileges by directing kscd to run an alternate program. The description only states the vulnerability; it do...
CVE-2000-0393
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute...
CVE-2000-0373
Technical details about CVE-2000-0373 are not publicly available in the provided documents; the KDE kvt vulnerability is noted, but specifics (affected versions, root cause, remediation) are not disclosed here. Monitor for official updates.
CVE-2000-0371
Technical details for CVE-2000-0371 are not publicly available in the provided documents. The materials here reiterate that the libmediatool library used by KDE mediatool can allow local symlink-based file creation. Monitor for updates.
CVE-2000-0460
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable...
CVE-2000-0460
CVE-2000-0460 affects KDE kdesud on Linux and is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long DISPLAY environment variable. The NVD metrics indicate Local attack vector, Low attack complexity, no authentication required, and a base score of 7.2 (HIGH)...
CVE-2000-0371: Undefined Security Weakness
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-2000-0393: Undefined Security Weakness
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute...
CVE-2000-0460: Undefined Security Weakness
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable...
CVE-2000-0491: Undefined Security Weakness
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...
CVE-2000-0373: Undefined Security Weakness
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges...
Linux news 16.06.00
SCO планирует выпускать свой собственный дистрибутив Linux. По-моему сейчас не делает свои дистрибутивы Linux только ленивый. Лучше бы был один, но отличный. Подробнее: http://slashdot.org/articles/00/06/13/127228.shtml Интервью с Аланом Коксом На LinuxJournal выложено интервью с одним из главных...
Очередная дырка в KDE
Класс KApplication некорректно работает с конфиуграционными файлами не проверяются символьные линки, что позволяет атаковать любое приложение, использующее данный класс например ktvision и ktuner...
KDE::KApplication feature?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------ TESO Security Advisory 2000/05/29 KDE KApplication configfile vulnerability Summary =================== A bug within the KDE configuration-file management has been discovered. Due to insecure creation of configuration files via...
