Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-libs/liblzw.Upgrade net-mail/mlmmj.Upgrade net-ftp/lftp.Upgrade media-tv/dvbstreamer.Upgrade sys-block/partimage.Upgrade x11-apps/xinit.Upgrade net-misc/iputils.Upgrade www-client/uzbl.Upgrade dev-util/insight.Upgrade dev-perl/perl-tk.Upgrade kde-base/kdm.Upgrade media-gfx/splashutils.Upgrade x11-misc/slim.Upgrade x11-libs/gtk+.Upgrade sys-devel/m4.Upgrade app-arch/ncompress.Upgrade app-text/dvipng.Upgrade sys-auth/pam_krb5.Upgrade dev-lang/tk.Upgrade kde-base/kget.Upgrade sys-apps/pmount.Upgrade app-antivirus/bitdefender-console.Upgrade app-arch/gzip.Upgrade sys-apps/acl.Upgrade app-misc/beanstalkd.Upgrade app-text/gv.Upgrade dev-util/sourcenav. | Oct 30, 2017 | May 17, 2010 |
| Suse | — | Upgrade kde4-krdcUpgrade kgetUpgrade kopete-develUpgrade kde4-krfbUpgrade kde4-knewstickerUpgrade kde4-kopeteUpgrade kdenetwork4-filesharingUpgrade kdenetwork4-filesharing-langUpgrade kde4-kgetUpgrade krdcUpgrade krfbUpgrade kopete | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kget | Nov 8, 2024 | May 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub