CERTA-2005-AVI-272
Vulnerability from certfr_avis
None
Description
Une vulnérabilité dans la création de fichiers de sauvegarde par Kate / Kwrite permet à un utilisateur mal intentionné d'avoir accès à des fichiers en lecture même si ses droits ne le lui permettent pas.
Solution
Se référer au bulletin de sécurité de l'éditeur (cf. section Documentation) pour l'obtention des correctifs.
Toutes les versions de KDE comprises entre les versions 3.2.0 et 3.4.0 (versions incluses).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eToutes les versions de KDE comprises entre les versions 3.2.0 et 3.4.0 (versions incluses).\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la cr\u00e9ation de fichiers de sauvegarde par Kate /\nKwrite permet \u00e0 un utilisateur mal intentionn\u00e9 d\u0027avoir acc\u00e8s \u00e0 des\nfichiers en lecture m\u00eame si ses droits ne le lui permettent pas.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur (cf. section\nDocumentation) pour l\u0027obtention des correctifs.\n",
"cves": [],
"initial_release_date": "2005-07-19T00:00:00",
"last_revision_date": "2005-09-09T00:00:00",
"links": [
{
"title": "Bug KDE dans le syst\u00e8me de gestions de bugs :",
"url": "https://bugs.kde.org/show_bug.cgi?id=103331"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:612 du 27 juillet 2005 :",
"url": "http://rhn.redhat.com/errata/RHSA-2005-612.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-804 du 08 septembre 2005 :",
"url": "http://www.debian.org/security/2005/dsa-804"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour kdebase du 18 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-kdebase.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:122 du 20 juillet 2005 :",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:122"
}
],
"reference": "CERTA-2005-AVI-272",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-07-19T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:122.",
"revision_date": "2005-07-21T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:612.",
"revision_date": "2005-07-28T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian DSA-804.",
"revision_date": "2005-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de Kate / Kwrite",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 KDE #20050718 du 18 juillet 2005",
"url": "http://www.kde.org/info/security/advisory-20050718-1.txt"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…