5.8

CVE-2011-1586

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the name attribute of a file element in a metalink file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1000.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kde ≫ Kde Sc Version <= 4.6.2
Kde ≫ Kde Sc Version 2.2.0
Kde ≫ Kde Sc Version 3.5.10
Kde ≫ Kde Sc Version 4.0.0
Kde ≫ Kde Sc Version 4.0.0 Update alpha1
Kde ≫ Kde Sc Version 4.0.0 Update alpha2
Kde ≫ Kde Sc Version 4.0.0 Update beta1
Kde ≫ Kde Sc Version 4.0.0 Update beta2
Kde ≫ Kde Sc Version 4.0.0 Update beta3
Kde ≫ Kde Sc Version 4.0.0 Update beta4
Kde ≫ Kde Sc Version 4.0.0 Update rc1
Kde ≫ Kde Sc Version 4.0.0 Update rc2
Kde ≫ Kde Sc Version 4.0.1
Kde ≫ Kde Sc Version 4.0.2
Kde ≫ Kde Sc Version 4.0.3
Kde ≫ Kde Sc Version 4.0.4
Kde ≫ Kde Sc Version 4.0.5
Kde ≫ Kde Sc Version 4.1.0
Kde ≫ Kde Sc Version 4.1.0 Update alpha1
Kde ≫ Kde Sc Version 4.1.0 Update beta1
Kde ≫ Kde Sc Version 4.1.0 Update beta2
Kde ≫ Kde Sc Version 4.1.0 Update rc
Kde ≫ Kde Sc Version 4.1.1
Kde ≫ Kde Sc Version 4.1.2
Kde ≫ Kde Sc Version 4.1.3
Kde ≫ Kde Sc Version 4.1.4
Kde ≫ Kde Sc Version 4.1.80
Kde ≫ Kde Sc Version 4.1.85
Kde ≫ Kde Sc Version 4.1.96
Kde ≫ Kde Sc Version 4.2 Update beta2
Kde ≫ Kde Sc Version 4.2 Update rc
Kde ≫ Kde Sc Version 4.2.0
Kde ≫ Kde Sc Version 4.2.1
Kde ≫ Kde Sc Version 4.2.2
Kde ≫ Kde Sc Version 4.2.3
Kde ≫ Kde Sc Version 4.2.4
Kde ≫ Kde Sc Version 4.3.0
Kde ≫ Kde Sc Version 4.3.0 Update beta1
Kde ≫ Kde Sc Version 4.3.0 Update beta3
Kde ≫ Kde Sc Version 4.3.0 Update rc1
Kde ≫ Kde Sc Version 4.3.0 Update rc2
Kde ≫ Kde Sc Version 4.3.0 Update rc3
Kde ≫ Kde Sc Version 4.3.1
Kde ≫ Kde Sc Version 4.3.2
Kde ≫ Kde Sc Version 4.3.3
Kde ≫ Kde Sc Version 4.3.4
Kde ≫ Kde Sc Version 4.3.5
Kde ≫ Kde Sc Version 4.4.0
Kde ≫ Kde Sc Version 4.4.0 Update beta1
Kde ≫ Kde Sc Version 4.4.0 Update beta2
Kde ≫ Kde Sc Version 4.4.0 Update rc1
Kde ≫ Kde Sc Version 4.4.0 Update rc2
Kde ≫ Kde Sc Version 4.4.0 Update rc3
Kde ≫ Kde Sc Version 4.4.1
Kde ≫ Kde Sc Version 4.4.2
Kde ≫ Kde Sc Version 4.4.3
Kde ≫ Kde Sc Version 4.4.4
Kde ≫ Kde Sc Version 4.4.5
Kde ≫ Kde Sc Version 4.5.0
Kde ≫ Kde Sc Version 4.5.1
Kde ≫ Kde Sc Version 4.5.2
Kde ≫ Kde Sc Version 4.5.3
Kde ≫ Kde Sc Version 4.5.4
Kde ≫ Kde Sc Version 4.5.5
Kde ≫ Kde Sc Version 4.6 Update beta1
Kde ≫ Kde Sc Version 4.6 Update beta2
Kde ≫ Kde Sc Version 4.6 Update rc1
Kde ≫ Kde Sc Version 4.6 Update rc2
Kde ≫ Kde Sc Version 4.6.0
Kde ≫ Kde Sc Version 4.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.12% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://openwall.com/lists/oss-security/2011/04/15/9
http://secunia.com/advisories/44124
Vendor Advisory
http://secunia.com/advisories/44329
http://websvn.kde.org/branches/KDE/4.4/kdenetwork/kget/ui/metalinkcreator/metalinker.cpp?r1=1227468&r2=1227467&pathrev=1227468
Patch
http://websvn.kde.org/branches/KDE/4.5/kdenetwork/kget/ui/metalinkcreator/metalinker.cpp?r1=1227469&r2=1227468&pathrev=1227469
http://websvn.kde.org/branches/KDE/4.6/kdenetwork/kget/ui/metalinkcreator/metalinker.cpp?r1=1227471&r2=1227470&pathrev=1227471
Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2011:081
http://www.redhat.com/support/errata/RHSA-2011-0465.html
http://www.ubuntu.com/usn/usn-1114-1/
http://www.vupen.com/english/advisories/2011/1019
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1021
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1135
https://bugzilla.redhat.com/show_bug.cgi?id=697042
https://exchange.xforce.ibmcloud.com/vulnerabilities/66826
https://launchpad.net/bugs/757526