Unscored severity · published May 17, 2010
CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute…
–
CVSS
3.8%
EPSS
No
On KEV
Description
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KS
Kde SC · Kde
4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1000
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
marc.info
http://marc.info/?l=oss-security&m=127378789518426&w=2
osvdb.org
http://osvdb.org/64690
Vendor Advisory
http://secunia.com/advisories/39528
More from Kde SC
–
CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via
–
CVE-2013-4132
KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of…
–
CVE-2011-3365
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog,…
–
CVE-2011-1586
Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote…
–
CVE-2011-1168
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject…