Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Ubuntu Local Security Checks >> USN176-1 : kdebase vulnerability


Vulnerability Assessment Details

USN176-1 : kdebase vulnerability

Vulnerability Assessment Summary
kdebase vulnerability

Detailed Explanation for this Vulnerability Assessment

Summary :

These remote packages are missing security patches :
- kappfinder
- kate
- kcontrol
- kdebase
- kdebase-bin
- kdebase-data
- kdebase-dev
- kdebase-doc
- kdebase-kio-tests
- kdepasswd
- kdeprint
- kdesktop
- kdm
- kfind
- khelpcenter
- kicker
- klipper
- kmenuedit
- konqueror
- konqueror-nstests
- konsole
- kpager
- kpersonalizer
- ksmserver
- ksplash
- ksysguard
- ksysguardd
- ktip
- kwin
- libkonq4
- libkonq4-dev
- xfonts-konsole


Description :

Ilja van Sprundel discovered a flaw in the lock file handling of
kcheckpass. A local attacker could exploit this to execute arbitrary
code with root rights.

Solution :

Upgrade to :
- kappfinder-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kate-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kcontrol-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-bin-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-data-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-dev-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-doc-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdebase-kio-tests-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdepasswd-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
- kdeprint-3.4.0-0ubuntu18.1 (Ubuntu 5.04)
-
[...]


Network Security Threat Level: High


Networks Security ID:

Vulnerability Assessment Copyright: Ubuntu Security Notice (C) 2005 Canonical, Inc. / NASL script (C) 2005 Michel Arboi

Cables, Connectors


Retro Restored Commodore 64 Computer System Tested Vintage 1980s C64 In Box picture

Retro Restored Commodore 64 Computer System Tested Vintage 1980s C64 In Box

$240.00



Commodore VIC-20 Vintage Computer System - Tested, Works picture

Commodore VIC-20 Vintage Computer System - Tested, Works

$99.99



Vintage Commodore VIC 20 In Box Sold As Is  picture

Vintage Commodore VIC 20 In Box Sold As Is

$100.00



commodore 1541 ii for parts please read part’s only picture

commodore 1541 ii for parts please read part’s only

$25.00



Vtg Commodore 64 Computer C-64 Box W/ Inserts picture

Vtg Commodore 64 Computer C-64 Box W/ Inserts

$34.99



Commodore Amiga 2000HD Model A2000 Computer NO HDD *POWERS ON* picture

Commodore Amiga 2000HD Model A2000 Computer NO HDD *POWERS ON*

$549.99



Commodore Amiga 500 Memory Expansion 2MB Fast Ram , Supra Ram 500RX,Tested picture

Commodore Amiga 500 Memory Expansion 2MB Fast Ram , Supra Ram 500RX,Tested

$169.99



Retro Restored Commodore 64 Computer System Tested Vintage 1980s C64 picture

Retro Restored Commodore 64 Computer System Tested Vintage 1980s C64

$198.88



Vintage Commodore VIC-20 Personal Color Computer in Box W/ Extras picture

Vintage Commodore VIC-20 Personal Color Computer in Box W/ Extras

$129.99



Commodore VIC-20 With Power Supply And AV Cables TESTED WORKS picture

Commodore VIC-20 With Power Supply And AV Cables TESTED WORKS

$135.00



Discussions

No Discussions have been posted on this vulnerability.