republican-creole
Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » KDE 4.x Multiple Highly Critical Vulnerabilities
Uniqs:
386		 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
Security Software Updates - 03 Jul 2009 »
« McAfee Virus update leaves PCs unbootable  

Smokey Bear
veritas odium parit
Premium
join:2008-03-15
Annie's Pub

KDE 4.x Multiple Highly Critical Vulnerabilities

Multiple highly critical vulnerabilities have been reported in KDE 4.x, which can be exploited by malicious people to compromise a user's system.

Impact: DoS, System access from remote.

CVE references: CVE-2009-0945, CVE-2009-1690

Solution Status: Vendor Workarounds >>

>> »websvn.kde.org/?view=rev&revision=983302, »websvn.kde.org/?view=rev&revision=983316
»secunia.com/advisories/35627/
--
Smokey's Security Forums »www.smokey-services.eu/forums/
Smokey's Security Weblog »smokeys.wordpress.com/
Site Member ASAP - Alliance of Security Analysis Professionals
permalink · 2009-07-02 13:13:27 · Print · Reply to this
SUMware
Premium
join:2002-05-21

4 edits

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

Linux distributions provide repository fixes and security updates for users.

More information:
»www.f-secure.com/vulnerabilities···00902981

PS - Don't run as root, then it's not an issue.
permalink · 2009-07-02 13:32:12 · Reply to this

Smokey Bear
veritas odium parit
Premium
join:2008-03-15
Annie's Pub

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

said by SUMware See Profile :

Linux distributions provide repository fixes and security updates for users.

More information:
»www.f-secure.com/vulnerabilities···00902981
According to F-Secure, this regard KDE 3.x
--
Smokey's Security Forums »www.smokey-services.eu/forums/
Smokey's Security Weblog »smokeys.wordpress.com/
Site Member ASAP - Alliance of Security Analysis Professionals
permalink · 2009-07-02 13:41:11 · Print · Reply to this
SUMware
Premium
join:2002-05-21

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

said by Smokey Bear See Profile :

said by SUMware See Profile :

Linux distributions provide repository fixes and security updates for users.

More information:
»www.f-secure.com/vulnerabilities···00902981
According to F-Secure, this regard KDE 3.x
Yes. That's what they say.
permalink · 2009-07-02 13:42:45 · Print · Reply to this

Smokey Bear
veritas odium parit
Premium
join:2008-03-15
Annie's Pub

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

I posted about KDE 4.x vulnerabilities...
permalink · 2009-07-02 13:46:23 · Reply to this
SUMware
Premium
join:2002-05-21

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

And I posted additional information for members.

I'd be happy to delete my post if you'd like, and its information, if you think that it will be of benefit to readers to do so.
permalink · 2009-07-02 13:49:18 · Reply to this

Smokey Bear
veritas odium parit
Premium
join:2008-03-15
Annie's Pub

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

said by SUMware See Profile :

And I posted additional information for members.

I'd be happy to delete my post if you'd like, and its information, if you think that it will be of benefit to readers to do so.
No need, your info regard also KDE vulnerabilities, but there was the need to clarify that your reply affect KDE 3.x users.
--
Smokey's Security Forums »www.smokey-services.eu/forums/
Smokey's Security Weblog »smokeys.wordpress.com/
Site Member ASAP - Alliance of Security Analysis Professionals
permalink · 2009-07-02 13:52:36 · Print · Reply to this
SUMware
Premium
join:2002-05-21

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

OK. Understand. Well, I guess that we've now accomplished that. LOL.
permalink · 2009-07-02 13:57:39 · Reply to this
KodiacZiller

join:2008-09-04
73368

1 edit

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

This appears to only be an issue if one is using a KHTML browser (a la Konqueror) which hardly anyone does, almost all Linux users use Firefox. And, as Sumware said, not running as root would stop this from compromising the entire system (and almost no one runs as root, especially on the *buntu's). Kubuntu has already pushed the fix for this. I was prompted to update earlier today.

This is one of the reasons I always create MAC profiles for my browser -- it's easy to do and makes bugs like this near impossible to execute. (Actually AppArmor is easy to do, SELinux not so much)

And where is Matunga?
permalink · 2009-07-02 17:38:53 · Print · Reply to this
SUMware
Premium
join:2002-05-21

Re: KDE 4.x Multiple Highly Critical Vulnerabilities

Agreed. It's pretty much a non-issue.
permalink · 2009-07-02 17:46:51 · Reply to this

jdong
Eat A Beaver, Save A Tree.
Premium
join:2002-07-09
Rochester, MI
clubs:		 In fact, the proactives stack/heap protection capabilities of most distributions (OpenSUSE, Fedora/RHEL, Ubuntu) will stop this class of vulnerabilities.
--
Ubuntu MOTU Developer and Forums Council
permalink · 2009-07-03 22:28:36 · Reply to this
Forums » Up and Running » Security » SecuritySecurity Software Updates - 03 Jul 2009 »
« McAfee Virus update leaves PCs unbootable  

Saturday, 28-Nov 09:28:29 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [121] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [72] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [69] Verizon CEO: Hulu Will Be Dead Soon
· [62] Thanksgiving Open Thread
· [52] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Samsung LCD TV No Picture but has Sound [Electronics]
· Backstab vs screws (not which to use) [Home Repair & Improvement]
· What is the spell hit cap for a lvl 80 full arcane spec mage [World of Warcraft]
· Is Gear Score now the new requirement to get pug invite? [World of Warcraft]
· 5 hour energy for diabetic [General Questions]
· [Vista] Why is HD So Full? [Microsoft Help]
· Using AirMax to provide triple play services? [Wireless Service Providers]