CERTA-2005-AVI-272
Vulnerability from certfr_avis - Published: 2005-07-19 - Updated: 2005-09-09None
Description
Une vulnérabilité dans la création de fichiers de sauvegarde par Kate / Kwrite permet à un utilisateur mal intentionné d'avoir accès à des fichiers en lecture même si ses droits ne le lui permettent pas.
Solution
Se référer au bulletin de sécurité de l'éditeur (cf. section Documentation) pour l'obtention des correctifs.
Toutes les versions de KDE comprises entre les versions 3.2.0 et 3.4.0 (versions incluses).
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eToutes les versions de KDE comprises entre les versions 3.2.0 et 3.4.0 (versions incluses).\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la cr\u00e9ation de fichiers de sauvegarde par Kate /\nKwrite permet \u00e0 un utilisateur mal intentionn\u00e9 d\u0027avoir acc\u00e8s \u00e0 des\nfichiers en lecture m\u00eame si ses droits ne le lui permettent pas.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur (cf. section\nDocumentation) pour l\u0027obtention des correctifs.\n",
"cves": [],
"initial_release_date": "2005-07-19T00:00:00",
"last_revision_date": "2005-09-09T00:00:00",
"links": [
{
"title": "Bug KDE dans le syst\u00e8me de gestions de bugs :",
"url": "https://bugs.kde.org/show_bug.cgi?id=103331"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:612 du 27 juillet 2005 :",
"url": "http://rhn.redhat.com/errata/RHSA-2005-612.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-804 du 08 septembre 2005 :",
"url": "http://www.debian.org/security/2005/dsa-804"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour kdebase du 18 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-kdebase.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:122 du 20 juillet 2005 :",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:122"
}
],
"reference": "CERTA-2005-AVI-272",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-07-19T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:122.",
"revision_date": "2005-07-21T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:612.",
"revision_date": "2005-07-28T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian DSA-804.",
"revision_date": "2005-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de Kate / Kwrite",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 KDE #20050718 du 18 juillet 2005",
"url": "http://www.kde.org/info/security/advisory-20050718-1.txt"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…