Fedora Core 4 : kdeedu-3.4.2-0.fc4.2 (2005-744)

NASLDB: Fedora Core 4 : kdeedu-3.4.2-0.fc4.2 (2005-744)

General

ID: 19469
Name: Fedora Core 4 : kdeedu-3.4.2-0.fc4.2 (2005-744)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Fedora Local Security Checks
Type: Local

Description

Ben Burton notified the KDE security team about several tempfile
handling related vulnerabilities in langen2kvtml, a conversion script
for kvoctrain. The script must be manually invoked.

The script uses known filenames in /tmp which allow an local attacker
to overwrite files writeable by the user invoking the conversion
script.

This update fixes these vulnerabilities.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2005/08/16
Plugin Release: 2005/08/19

Plugin

Version: 1.8
Filename: fedora_2005-744.nasl
Filesize: 3084 bytes
MD5 Hash: 849a0d76ee1b11df09b7336535cf7e52

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG