Test Kennung:	1.3.6.1.4.1.25623.1.0.54775
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200412-16 (KDE)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory GLSA 200412-16. kdelibs and kdebase contain a flaw allowing password disclosure when creating a link to a remote file. Furthermore Konqueror is vulnerable to window injection. Solution: All kdelibs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=kde-base/kdelibs-3.2.3-r4' All kdebase users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=kde-base/kdebase-3.2.3-r3' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200412-16 http://bugs.gentoo.org/show_bug.cgi?id=72804 http://bugs.gentoo.org/show_bug.cgi?id=73869 http://www.kde.org/info/security/advisory-20041209-1.txt http://www.kde.org/info/security/advisory-20041213-1.txt CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1171 BugTraq ID: 11866 http://www.securityfocus.com/bid/11866 Bugtraq: 20041129 Password Disclosure for SMB Shares in KDE's Konqueror (Google Search) http://marc.info/?l=bugtraq&m=110178786809694&w=2 Bugtraq: 20041209 KDE Security Advisory: plain text password exposure (Google Search) http://marc.info/?l=bugtraq&m=110261063201488&w=2 CERT/CC vulnerability note: VU#305294 http://www.kb.cert.org/vuls/id/305294 Computer Incident Advisory Center Bulletin: P-051 http://www.ciac.org/ciac/bulletins/p-051.shtml http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:150 http://www.sec-consult.com/index.php?id=118 http://www.osvdb.org/12248 http://securitytracker.com/id?1012471 http://secunia.com/advisories/13477 http://secunia.com/advisories/13486 http://secunia.com/advisories/13560 XForce ISS Database: kde-smb-password-plaintext(18267) https://exchange.xforce.ibmcloud.com/vulnerabilities/18267 Common Vulnerability Exposure (CVE) ID: CVE-2004-1158 BugTraq ID: 11853 http://www.securityfocus.com/bid/11853 Bugtraq: 20041213 KDE Security Advisory: Konqueror Window Injection Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110296048613575&w=2 http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ http://secunia.com/secunia_research/2004-13/advisory/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11056 http://www.redhat.com/support/errata/RHSA-2005-009.html http://secunia.com/advisories/13254 SuSE Security Announcement: SUSE-SR:2005:001 (Google Search) http://www.novell.com/linux/security/advisories/2005_01_sr.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.