PT-2011-1148 · Kde+1 · Kde Sc+5

Debfx + 1 · Published 2011-04-21 · Updated 2023-02-13 · CVE-2011-1586

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions KDE SC versions 4.6.2 and earlier kdenetwork versions 4.3.4 kdenetwork-devel versions 4.3.4 kdenetwork-debuginfo versions 4.3.4 kdenetwork-libs versions 4.3.4

Description The issue is related to a directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function, which can be exploited remotely. This vulnerability allows remote attackers to create arbitrary files via a .. (dot dot) in the name attribute of a file element in a metalink file. The vulnerability exists due to an incomplete fix for a previous issue. Exploitation of this vulnerability can lead to a violation of the integrity and availability of protected information.

Recommendations For KDE SC versions 4.6.2 and earlier, consider updating to a newer version to resolve the issue. For kdenetwork versions 4.3.4, kdenetwork-devel versions 4.3.4, kdenetwork-debuginfo versions 4.3.4, and kdenetwork-libs versions 4.3.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2015-07750

BDU:2015-07751

BDU:2015-07752

BDU:2015-07753

CVE-2011-1586

RHSA-2011:0465

RHSA-2011_0465

Affected Products

Kde Sc

Red Hat

Kdenetwork

Kdenetwork-Debuginfo

Kdenetwork-Devel

Kdenetwork-Libs

References · 24

• http://mandriva.com/security/advisories?name=MDVSA-2011:081 · Vendor Advisory
• http://ubuntu.com/usn/usn-1114-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07753 · Security Note
• https://bdu.fstec.ru/vul/2015-07751 · Security Note
• http://websvn.kde.org/branches/KDE/4.6/kdenetwork/kget/ui/metalinkcreator/metalinker.cpp?r1=1227471&r2=1227470&pathrev=1227471 · Patch
• https://bdu.fstec.ru/vul/2015-07752 · Security Note
• http://secunia.com/advisories/44124 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0465.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/1021 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07750 · Security Note
• http://websvn.kde.org/branches/KDE/4.4/kdenetwork/kget/ui/metalinkcreator/metalinker.cpp?r1=1227468&r2=1227467&pathrev=1227468 · Patch
• http://redhat.com/support/errata/RHSA-2011-0465.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/1019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1586 · Security Note
• http://secunia.com/advisories/44329 · Note