|
KDE langen2kvtml Insecure Temporary File Creation
|
|
|
|
|
Secunia Advisory:
|
SA16428
|
|
|
Release Date:
|
2005-08-15
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | KDE 3.x
|
| | CVE reference: | CVE-2005-2101 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
A vulnerability has been reported in KDE, which can be exploited by malicious, local users to perform certain actions with escalated privileges on a vulnerable system.
The vulnerability is caused due to langen2kvtml creating temporary files insecurely. This can be exploited via symlink attacks to overwrite arbitrary files on the system with the privileges of the user executing the vulnerable script.
The vulnerability affects KDE 3.0 through KDE 3.4.2.
Solution:
Apply patch (for KDE 3.4.2):
ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.2-kdeedu.diff
0e82c5810df3b04370188ba13cc50203
Provided and/or discovered by:
The vendor credits Javier Fernandez-Sanguino Pena.
Original Advisory:
http://www.kde.org/info/security/advisory-20050815-1.txt
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
46 Related Secunia Security Advisories, displaying 10
|
|
|
1. KDE start_kdeinit Privilege Escalation Vulnerability
|
|
2. KDE KDM Local Denial of Service Weakness
|
|
3. KDE and KOffice "Stream.cc" Multiple Vulnerabilities
|
|
4. KDE KDM Login Password Check Security Bypass
|
|
5. KDE and KOffice "StreamPredictor::StreamPredictor()" Integer Overflow
|
|
6. KMail "--status-fd" Incorrect GnuPG Usage
|
|
7. Konqueror HTML Parsing Weakness
|
|
8. KDE and KOffice PDF Invalid Tree Node Denial of Service Weakness
|
|
9. KDE JPEG kfile-info EXIF Denial of Service Weakness
|
|
10. KDE KDM Arbitrary File Reading Vulnerability
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
