kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kdelibs: kssl incorrect verification of SSL certificate with NUL in subjectAltName (CVE-2009-2702)

  - kf5-kio, kdelibs: Information Leak when accessing https when using a malicious PAC file (CVE-2017-6410)

  - kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a     crafted request that triggers an internal server error, which includes the username and password in an     error message. (CVE-2013-2074)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kdelibs: prints passwords contained in HTTP URLs in error messages (CVE-2013-2074)

  - kf5-kio, kdelibs: Information Leak when accessing https when using a malicious PAC file (CVE-2017-6410)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems :

CVE-2017-6410

Itzik Kotler, Yonatan Fridburg and Amit Klein of Safebreach Labs reported that URLs are not sanitized before passing them to FindProxyForURL, potentially allowing a remote attacker to obtain sensitive information via a crafted PAC file.

CVE-2017-8422

Sebastian Krahmer from SUSE discovered that the KAuth framework contains a logic flaw in which the service invoking dbus is not properly checked. This flaw allows spoofing the identity of the caller and gaining root privileges from an unprivileged account.

CVE-2013-2074

It was discovered that KIO would show web authentication credentials in some error cases.

For Debian 7 'Wheezy', these problems have been fixed in version 4:4.8.4-4+deb7u3.

We recommend that you upgrade your kde4libs packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201406-34 (KDE Libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in KDE Libraries. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a man-in-the-middle attack via any       certificate issued by a legitimate certification authority. Furthermore,       a local attacker may gain knowledge of user passwords through an       information leak.
  Workaround :

    There is no known workaround at this time.

It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a low-impact security issue in the KDE 3 compatibility (kdelibs3) version of kio_http where it would print passwords contained in HTTP URLs in error and debugging messages (CVE-2013-2074).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198417	RHEL 5 : kdelibs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198408	RHEL 6 : kdelibs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
100431	Debian DLA-952-1 : kde4libs security update	Nessus	Debian Local Security Checks	high
76305	GLSA-201406-34 : KDE Libraries: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
66691	Ubuntu 12.04 LTS / 12.10 / 13.04 : kde4libs vulnerability (USN-1842-1)	Nessus	Ubuntu Local Security Checks	medium
66655	Fedora 18 : kdelibs3-3.5.10-53.fc18 (2013-8717)	Nessus	Fedora Local Security Checks	medium
66650	Fedora 17 : kdelibs3-3.5.10-53.fc17 (2013-8689)	Nessus	Fedora Local Security Checks	medium
66607	Fedora 19 : kdelibs3-3.5.10-53.fc19 (2013-8625)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-2074

high

Tenable Plugins

medium

medium

high

medium

medium

medium

medium

medium