Description
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.
References
- 40141 vdb-entry
- USN-938-1 vendor-advisory
- 20100513 Secunia Research: KDE KGet Insecure File Operation Vulnerability mailing-list
- 20100514 Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability mailing-list
- ADV-2010-1144 vdb-entry
- http://secunia.com/secunia_research/2010-70/
- kde-metalink-file-overwrite(58629) vdb-entry
- http://www.kde.org/info/security/advisory-20100513-1.txt
- ADV-2010-3096 vdb-entry
- FEDORA-2010-18029 vendor-advisory
- [oss-security] 20100513 KDENetwork vulnerabilities mailing-list
- 39528 third-party-advisory
- ADV-2010-1142 vdb-entry
- 1023984 vdb-entry
- 64689 vdb-entry
- 39787 third-party-advisory