Description
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
References
- 40141 vdb-entry
- USN-938-1 vendor-advisory
- ADV-2011-1101 vdb-entry
- 42423 third-party-advisory
- 20100514 Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability mailing-list
- ADV-2010-1144 vdb-entry
- MDVSA-2010:098 vendor-advisory
- http://secunia.com/secunia_research/2010-69/
- kde-name-directory-traversal(58628) vdb-entry
- 20100513 Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability mailing-list
- http://www.kde.org/info/security/advisory-20100513-1.txt
- ADV-2010-3096 vdb-entry
- FEDORA-2010-18029 vendor-advisory
- [oss-security] 20100513 KDENetwork vulnerabilities mailing-list
- 39528 third-party-advisory
- ADV-2010-1142 vdb-entry
- FEDORA-2011-5211 vendor-advisory
- 1023984 vdb-entry
- SUSE-SR:2010:024 vendor-advisory
- 64690 vdb-entry
- 39787 third-party-advisory