Detections
Analytics

RHEL 2.1 : kdelibs (RHSA-2003:003)

high Nessus Plugin ID 12347

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

A security issue has been found in KDE. This errata provides updates which resolve these issues.

KDE is a graphical desktop environment for the X Window System.

KDE fails in multiple places to properly quote URLs and filenames before passing them to a command shell. This could allow remote attackers to execute arbitrary commands through carefully crafted URLs, filenames, or email addresses.

Users of KDE are advised to install the updated packages which contain backported patches to correct this issue.

Please note that for the Itanium (IA64) architecture only, this update also fixes several other vulnerabilities. Details concerning these vulnerabilities can be found in advisory RHSA-2002:221 and correspond to CVE names CVE-2002-0970, CVE-2002-1151, CVE-2002-1247, and CVE-2002-1306.

Solution

Update the affected packages.

See Also

https://access.redhat.com/security/cve/cve-2002-1393

https://www.kde.org/info/security/advisory-20021220-1.txt

https://access.redhat.com/errata/RHSA-2003:003

Plugin Details

Severity: High

ID: 12347

File Name: redhat-RHSA-2003-003.nasl

Version: 1.26

Type: local

Agent: unix

Published: 7/6/2004

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:kdelibs-sound, p-cpe:/a:redhat:enterprise_linux:kdepim, p-cpe:/a:redhat:enterprise_linux:kdebase, p-cpe:/a:redhat:enterprise_linux:kdelibs-devel, p-cpe:/a:redhat:enterprise_linux:kdepim-cellphone, p-cpe:/a:redhat:enterprise_linux:kdeutils, p-cpe:/a:redhat:enterprise_linux:kdepim-devel, p-cpe:/a:redhat:enterprise_linux:kdegames, p-cpe:/a:redhat:enterprise_linux:kdemultimedia, p-cpe:/a:redhat:enterprise_linux:kdegraphics, p-cpe:/a:redhat:enterprise_linux:kdelibs, p-cpe:/a:redhat:enterprise_linux:kdemultimedia-devel, cpe:/o:redhat:enterprise_linux:2.1, p-cpe:/a:redhat:enterprise_linux:kdepim-pilot, p-cpe:/a:redhat:enterprise_linux:kdebase-devel, p-cpe:/a:redhat:enterprise_linux:kdegraphics-devel, p-cpe:/a:redhat:enterprise_linux:kdesdk, p-cpe:/a:redhat:enterprise_linux:kdenetwork-ppp, p-cpe:/a:redhat:enterprise_linux:kdenetwork, p-cpe:/a:redhat:enterprise_linux:kdelibs-sound-devel, p-cpe:/a:redhat:enterprise_linux:kdesdk-devel, p-cpe:/a:redhat:enterprise_linux:arts

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 2/14/2003

Vulnerability Publication Date: 1/17/2003

Reference Information

CVE: CVE-2002-1393

RHSA: 2003:003