Lucene search
SuseSUSE-SA:2004:014HistoryMay 26, 2004 - 11:35 a.m.
remote file creation in kdelibs/kdelibs3
2004-05-2611:35:37
lists.opensuse.org
19
0.429 Medium
EPSS
Percentile
97.4%
The kdelibs3 (kdelibs for SLES7 based products) package is a core package for the K desktop environment (KDE). The URI handler of the kdelibs3 and kdelibs class library contains a flaw which allows remote attackers to create arbitrary files as the user utilizing the kdelibs3/kdelibs package. Affected are applications which use the kdelibs3/kdelibs URI handler such as Konqueror or Kmail. The original KDE advisory can be found at http://www.kde.org/info/security/advisory-20040517-1.txt
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 9.1 | x86_64 | kdelibs3 | < 3.2.1-44.10 | kdelibs3-3.2.1-44.10.x86_64.rpm |
| openSUSE | 8.1 | i586 | kdelibs3 | < 3.0.5-54 | kdelibs3-3.0.5-54.i586.rpm |
| openSUSE | 9.0 | x86_64 | kdelibs3 | < 3.1.4-51 | kdelibs3-3.1.4-51.x86_64.rpm |
| openSUSE | 9.0 | i586 | kdelibs3 | < 3.1.4-51 | kdelibs3-3.1.4-51.i586.rpm |
| openSUSE | 8.2 | i586 | kdelibs3 | < 3.1.1-139 | kdelibs3-3.1.1-139.i586.rpm |
| openSUSE | 8.0 | i386 | kdelibs3 | < 3.0-120 | kdelibs3-3.0-120.i386.rpm |
| openSUSE | 9.1 | i586 | kdelibs3 | < 3.2.1-44.10 | kdelibs3-3.2.1-44.10.i586.rpm |
Related
openvas
openvas
Slackware Advisory SSA:2004-133-01 apache
2012-09-11 00:00:00
Slackware: Security Advisory (SSA:2004-133-01)
2012-09-10 00:00:00
Gentoo Security Advisory GLSA 200405-22 (Apache)
2008-09-24 00:00:00
nessus
nessus
Slackware 8.1 / 9.0 / 9.1 / current : apache (SSA:2004-133-01)
2005-07-13 00:00:00
GLSA-200405-22 : Apache 1.3: Multiple vulnerabilities
2004-08-30 00:00:00
Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2004:046-1)
2004-07-31 00:00:00
gentoo
gentoo
Apache 1.3: Multiple vulnerabilities
2004-05-26 00:00:00
KDE URI Handler Vulnerabilities
2004-05-19 00:00:00
suse
suse
remote command execution in cvs
2004-06-09 13:52:11
remote code execution in cvs
2004-04-14 15:54:44
local privilege escalation in mc
2004-05-14 14:09:57
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.0.40-21
2003-02-24 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.0.40-21
2003-02-24 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.0.40-21
2003-02-24 00:00:00
f5
f5
K5576 : Authentication vulnerability in Apache mod_digest - CAN-2003-0987
2013-03-28 00:00:00
SOL5576 - Authentication vulnerability in Apache mod_digest - CAN-2003-0987
2007-05-16 00:00:00
nvd
nvd
cvelist
cvelist
ubuntucve
ubuntucve
freebsd
freebsd
Apache 1.3 IP address access control failure on some 64-bit platforms
2004-03-07 00:00:00
URI handler vulnerabilities in several browsers
2004-05-12 00:00:00
httpd
httpd
Apache Httpd < 1.3.31 : mod_digest nonce checking
2003-12-18 00:00:00
Apache Httpd < 1.3.31 : Allow/Deny parsing on big-endian 64-bit platforms
2003-10-15 00:00:00
Apache Httpd < 2.0.49 : Error log escape filtering
2003-02-24 00:00:00
cve
cve
debiancve
debiancve
CVE-2003-0020
2004-09-01 04:00:00
CVE-2003-0083
2003-04-02 05:00:00
cert
cert
Apache HTTP Server vulnerable to DoS race condition in the handling of short-lived connections
2004-03-24 00:00:00
Apache vulnerable to DoS
2003-04-08 00:00:00
securityvulns
securityvulns
KDE Security Advisory: URI Handler Vulnerabilities
2004-05-18 00:00:00
Jetty 6.x and 7.x Multiple Vulnerabilities
2009-10-26 00:00:00
SUSE Security Announcement: cvs (SuSE-SA:2004:008)
2004-04-15 00:00:00
osv
osv
kdelibs - unsanitised input
2004-06-14 00:00:00
redhat
redhat
(RHSA-2004:222) kdelibs security update
2004-05-17 00:00:00
(RHSA-2003:244) apache security update
2003-09-22 00:00:00
(RHSA-2004:600) apache, mod_ssl security update
2004-12-13 00:00:00
debian
debian
[SECURITY] [DSA 518-1] New kdelibs packages fix URI handler vulnerabilities
2004-06-14 13:29:31
[SECURITY] [DSA 518-1] New kdelibs packages fix URI handler vulnerabilities
2004-06-14 13:29:31
seebug
seebug
jetty 6.x - 7.x xss, information disclosure, injection
2014-07-01 00:00:00
jetty 6.x - 7.x xss information disclosure injection
2009-10-26 00:00:00
jetty 6.x - 7.x xss information disclosure injection
2009-10-26 00:00:00
exploitpack
exploitpack
jetty 6.x 7.x - Cross-Site Scripting Information Disclosure Injection
2009-10-26 00:00:00
packetstorm
packetstorm
Jetty 6.x / 7.x Information Disclosure / XSS
2009-10-26 00:00:00
Nginx, Varnish, Cherokee, etc Log Injection
2010-01-11 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitdb
exploitdb