Sebastian Krahmer discovered a race condition in the KDE Display Manager (KDM). A local attacker could exploit this to change the permissions on arbitrary files, thus allowing privilege escalation.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update set updates the KDE Software Compilation (KDE SC) to KDE SC 4.4.3, which has a number of improvements: * Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management * Flash plugin support in KHTML has been enhanced to work with newest Youtube skins * Case-sensitivity in renaming fixes in KIO, KDE's network-transparent I/O library

  - Hiding the mouse cursor in some special cases in     presentation mode and two possible crashers have been     fixed and more bugfixes and translation updates. See     http://kde.org/announcements/announce-4.4.3.php for more     information. In addition, the security issues     CVE-2010-1000 and CVE-2010-1511 (improper sanitization     of metalink attribute for downloading files) in KGet     have been fixed, and Kppp now prompts for the root     password instead of failing with a cryptic error when     run as a regular user.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0348 advisory.

    [6:3.5.4-21.0.1.el5_5.1]
    - Update definition of KONQUEROR_VERSION in specfile

    [6:3.5.4-21.1]
    - Resolves: #570622, CVE-2010-0436 kdm privilege escalation flaw

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue.

This build includes * a couple of small powerdevil patches (see kde bugs 221637, 221637), * fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one, * initial attempts at kdm/plymouth integration, * upstream kdm security fix for CVE-2010-0436

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
45576	Ubuntu 8.10 / 9.04 / 9.10 : kdebase-workspace vulnerability (USN-932-1)	Nessus	Ubuntu Local Security Checks	2010/4/20	2019/9/19	medium
47499	Fedora 11 : kde-l10n-4.4.3-1.fc11 / kdeaccessibility-4.4.3-1.fc11.1 / kdeadmin-4.4.3-1.fc11.1 / etc (2010-8547)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
49851	SuSE 10 Security Update : kdm (ZYPP Patch Number 6941)	Nessus	SuSE Local Security Checks	2010/10/11	2021/1/14	medium
50921	SuSE 11 Security Update : kdm (SAT Patch Number 2136)	Nessus	SuSE Local Security Checks	2010/12/2	2021/1/14	medium
68031	Oracle Linux 5 : kdebase (ELSA-2010-0348)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
45533	openSUSE Security Update : kde4-kdm (kde4-kdm-2134)	Nessus	SuSE Local Security Checks	2010/4/15	2021/1/14	medium
45539	SuSE 10 Security Update : kdm (ZYPP Patch Number 6942)	Nessus	SuSE Local Security Checks	2010/4/15	2021/1/14	medium
47440	Fedora 13 : kdebase-workspace-4.4.2-5.fc13 (2010-6605)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium

检测

插件搜索

medium

medium

medium

medium

high

medium

medium

medium