Vulnerability Assessment & Network Security Forums
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.
Vulnerability Assessment Details
Check for the version of the kdelibs/kdebase package
Detailed Explanation for this Vulnerability Assessment
The remote host is missing the patch for the advisory MDKSA-2004:086 (kdelibs/kdebase).
A number of vulnerabilities were discovered in KDE that are corrected with these
The integrity of symlinks used by KDE are not ensured and as a result can be
abused by local attackers to create or truncate arbitrary files or to prevent
KDE applications from functioning correctly (CVE-2004-0689).
The DCOPServer creates temporary files in an insecure manner. These temporary
files are used for authentication-related purposes, so this could potentially
permit a local attacker to compromise the account of any user running a KDE
application (CVE-2004-0690). Note that only KDE 3.2.x is affected by this
The Konqueror web browser permits websites to load web pages into a frame of any
other frame-based web page that the user may have open. This could potentially
permit a malicious website to make Konqueror insert its own frames into the page
of an otherwise trusted website (CVE-2004-0721).
The Konqueror web browser also permits websites to set cookies for certain
country-specific top-level domains. This can be done to make Konqueror send the
cookies to all other web sites operating under the same domain, which can be
abused to become part of a session fixation attack. All country-specific
secondary top-level domains that use more than 2 characters in the secondary
part of the domain name, and that use a secondary part other than com, net, mil,
org, gove, edu, or int are affected (CVE-2004-0746).
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:086
Network Security Threat Level: High
Networks Security ID: 10991, 11186, 11552
Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security
|Dell R710 Dual E5645 6 Core 2.40GHz 48GB 8x 480GB SSD 2.5in H700 iDRAC Rails RPS
|Dell R720xd OEM Dual E5-2670 v2 10C 2.5GHz 256GB 2x 450GB, 10x 4TB 12 Bay Rails
|DELL POWEREDGE M630 E5-2637V3 3.5GHZ 32GB 2 X 250GB SATA S130
|DELL POWEREDGE R630 8 BAY E5-2630LV3 1.8GHZ 384GB 6 X 1TB SAS H730
No Discussions have been posted on this vulnerability.