Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Ubuntu Local Security Checks >> USN176-1 : kdebase vulnerability


Vulnerability Assessment Details

USN176-1 : kdebase vulnerability

Vulnerability Assessment Summary
kdebase vulnerability

Detailed Explanation for this Vulnerability Assessment

Summary :

These remote packages are missing security patches :
- kappfinder
- kate
- kcontrol
- kdebase
- kdebase-bin
- kdebase-data
- kdebase-dev
- kdebase-doc
- kdebase-kio-tests
- kdepasswd
- kdeprint
- kdesktop
- kdm
- kfind
- khelpcenter
- kicker
- klipper
- kmenuedit
- konqueror
- konqueror-nstests
- konsole
- kpager
- kpersonalizer
- ksmserver
- ksplash
- ksysguard
- ksysguardd
- ktip
- kwin
- libkonq4
- libkonq4-dev
- xfonts-konsole


Description :

Ilja van Sprundel discovered a flaw in the lock file handling of
kcheckpass. A local attacker could exploit this to execute arbitrary
code with root rights.

Solution :

Upgrade to :
- kappfinder-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kate-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kcontrol-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-bin-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-data-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-dev-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-doc-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-kio-tests-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdepasswd-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdeprint-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
-
[...]


Network Security Threat Level: High


Networks Security ID:

Vulnerability Assessment Copyright: Ubuntu Security Notice (C) 2005 Canonical, Inc. / NASL script (C) 2005 Michel Arboi

Cables, Connectors


Gigabyte 4U AI Server 10x Nvidia GPU 2x Xeon Gold 6150 36 Core 2.7GHz DDR4 RAM picture

Gigabyte 4U AI Server 10x Nvidia GPU 2x Xeon Gold 6150 36 Core 2.7GHz DDR4 RAM

$1625.00



Dell EMC PowerEdge R440 Xeon silver 4215 2.5GHz 16 GB ram  2x 550W PSU No HDD picture

Dell EMC PowerEdge R440 Xeon silver 4215 2.5GHz 16 GB ram 2x 550W PSU No HDD

$275.00



867959-B21 HPE ProLiant DL360 G10 CTO Server W/ 2x 865414-B21 1x 840140-001 picture

867959-B21 HPE ProLiant DL360 G10 CTO Server W/ 2x 865414-B21 1x 840140-001

$245.00



Dell PowerEdge R240 Intel Xeon E-2224 3.50GHz 8GB DDR4 ECC NO HDD 250W picture

Dell PowerEdge R240 Intel Xeon E-2224 3.50GHz 8GB DDR4 ECC NO HDD 250W

$285.97



Dell PowerEdge R730XD 28 Core Server 2X Xeon E5-2680 V4 H730 32GB RAM No HDD picture

Dell PowerEdge R730XD 28 Core Server 2X Xeon E5-2680 V4 H730 32GB RAM No HDD

$378.93



Dell PowerEdge C4130 1U AI GPU Server | 2x E5-2690 v3 | 64gb Ram | 2x 1600W picture

Dell PowerEdge C4130 1U AI GPU Server | 2x E5-2690 v3 | 64gb Ram | 2x 1600W

$524.99



Dell PowerEdge C4130 1U AI GPU Server | 2x E5-2680 v3 | 32gb Ram | 2x 1600W picture

Dell PowerEdge C4130 1U AI GPU Server | 2x E5-2680 v3 | 32gb Ram | 2x 1600W

$409.99



Supermicro 2U GPU Server SYS-2029GP-TR 2x Xeon 6130 32C 6x PCIe 3.0 x16 Slots picture

Supermicro 2U GPU Server SYS-2029GP-TR 2x Xeon 6130 32C 6x PCIe 3.0 x16 Slots

$745.00



Dell PowerEdge FX2s + 8x FC430 Blades 16x E5-2630v4 160 Cores Rails No PSU/RAM picture

Dell PowerEdge FX2s + 8x FC430 Blades 16x E5-2630v4 160 Cores Rails No PSU/RAM

$699.00



Dell PowerEdge R530 2x E5-2630v4 H330 iDRAC8 Port Card Riser No PSU/RAM/HDD picture

Dell PowerEdge R530 2x E5-2630v4 H330 iDRAC8 Port Card Riser No PSU/RAM/HDD

$99.99



Discussions

No Discussions have been posted on this vulnerability.