CVE-2010-1000

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Weaknesses (CWE)

CWE-22

Affected Products (53)

kde · kde_scvulnerable

...and 3 more

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

http://marc.info/?l=oss-security&m=127378789518426&w=2

http://osvdb.org/64690

http://secunia.com/advisories/39528

Vendor Advisory

http://secunia.com/advisories/39787

Vendor Advisory

http://secunia.com/advisories/42423

Vendor Advisory

http://secunia.com/secunia_research/2010-69/

Vendor Advisory

http://securitytracker.com/id?1023984

http://www.kde.org/info/security/advisory-20100513-1.txt

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:098

http://www.securityfocus.com/archive/1/511281/100/0/threaded

http://www.securityfocus.com/archive/1/511294/100/0/threaded

http://www.securityfocus.com/bid/40141

http://www.ubuntu.com/usn/USN-938-1

http://www.vupen.com/english/advisories/2010/1142

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1144

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3096

Vendor Advisory

http://www.vupen.com/english/advisories/2011/1101