CVE-2010-1511

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

Weaknesses (CWE)

CWE-264

Affected Products (56)

kde · kgetvulnerable

kde · kde_scvulnerable

...and 6 more

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html

http://marc.info/?l=oss-security&m=127378789518426&w=2

http://osvdb.org/64689

http://secunia.com/advisories/39528

Vendor Advisory

http://secunia.com/advisories/39787

Vendor Advisory

http://secunia.com/secunia_research/2010-70/

Vendor Advisory

http://securitytracker.com/id?1023984

http://www.kde.org/info/security/advisory-20100513-1.txt

Vendor Advisory

http://www.securityfocus.com/archive/1/511279/100/0/threaded

http://www.securityfocus.com/archive/1/511294/100/0/threaded

http://www.securityfocus.com/bid/40141

http://www.ubuntu.com/usn/USN-938-1

http://www.vupen.com/english/advisories/2010/1142

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1144

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3096

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/58629

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html

http://marc.info/?l=oss-security&m=127378789518426&w=2

http://osvdb.org/64689

http://secunia.com/advisories/39528

Vendor Advisory