|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200501-18] KDE FTP KIOslave: Command injection Vulnerability Assessment Details
|
[GLSA-200501-18] KDE FTP KIOslave: Command injection |
||
KDE FTP KIOslave: Command injection Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200501-18 (KDE FTP KIOslave: Command injection) The FTP KIOslave fails to properly parse URL-encoded newline characters. Impact A possible hacker could exploit this to execute arbitrary FTP commands on the server and due to similiarities between the FTP and the SMTP protocol, this vulnerability also permits a possible hacker to connect to a SMTP server and issue arbitrary commands, for example sending an email. Workaround There is no known workaround at this time. References: http://www.kde.org/info/security/advisory-20050101-1.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1165 Solution: All kdelibs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose kde-base/kdelibs Network Security Threat Level: Medium Networks Security ID: Vulnerability Assessment Copyright: (C) 2005 Michel Arboi |
||
Cables, Connectors |
HP ProLiant MicroServer Gen8 Xeon E3-1220L V2 2.3GHz 16GB RAM NO HDD NO OS
$239.99
Dell R740 OEMR XL Trend Micro Server | 2x Xeon Gold 6132 CPU 64GB Ram, H730P
$489.00
HPE ProLiant MicroServer Gen10 Plus V2
$500.00
SuperMicro Server 505-2 Intel Atom 2.4GHz 8GB 2X4GB RAM 5018A-FTN4
$150.00
HP PROLIANT MICROSERVER GEN8 TPS-W003, Celeron 1610T, 16 GB RAM, 1TB HDD NO OS
$200.00
HPE ProLiant MicroServer Gen10 Gold G5420 8GB, - P16005-001 MICRO TOWER SERVER
$399.99
HPE ProLiant MicroServer Gen10 Plus v2 Ultra Micro Tower Server - 1 x Intel Xeon
$695.99
HP ProLiant MicroServer Gen10 1x Opteron X3421 2.1 GHz 16 GB RAM No HDD No OS
$419.95
SUPERMICRO P4SPA+ Pentium 4 3.00GHz 496MB Ram 250GB HDD Windows XP Rack Mount
$249.99
$99.74
|
||
No Discussions have been posted on this vulnerability. |