Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2010-1000 First vendor Publication 2010-05-17
Vendor Cve Last vendor Modification 2018-10-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:P)
Cvss Base Score 5.8 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1000

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 53

OpenVAS Exploits

Date Description
2012-06-06 Name : RedHat Update for kdenetwork RHSA-2011:0465-01
File : nvt/gb_RHSA-2011_0465-01_kdenetwork.nasl
2011-05-06 Name : Mandriva Update for kdenetwork4 MDVSA-2011:081 (kdenetwork4)
File : nvt/gb_mandriva_MDVSA_2011_081.nasl
2011-04-22 Name : Fedora Update for kdenetwork FEDORA-2011-5211
File : nvt/gb_fedora_2011_5211_kdenetwork_fc13.nasl
2010-12-09 Name : Fedora Update for kdenetwork FEDORA-2010-18029
File : nvt/gb_fedora_2010_18029_kdenetwork_fc12.nasl
2010-05-28 Name : Fedora Update for kdelibs FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdelibs_fc11.nasl
2010-05-28 Name : Fedora Update for kdeaccessibility FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeaccessibility_fc11.nasl
2010-05-28 Name : Fedora Update for kdeadmin FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeadmin_fc11.nasl
2010-05-28 Name : Fedora Update for kdeartwork FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeartwork_fc11.nasl
2010-05-28 Name : Fedora Update for kdebase-runtime FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdebase-runtime_fc11.nasl
2010-05-28 Name : Fedora Update for kdebase-workspace FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdebase-workspace_fc11.nasl
2010-05-28 Name : Fedora Update for kdebase FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdebase_fc11.nasl
2010-05-28 Name : Fedora Update for kdebindings FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdebindings_fc11.nasl
2010-05-28 Name : Fedora Update for kdeedu FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeedu_fc11.nasl
2010-05-28 Name : Fedora Update for kdegames FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdegames_fc11.nasl
2010-05-28 Name : Fedora Update for kdegraphics FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdegraphics_fc11.nasl
2010-05-28 Name : Mandriva Update for kdenetwork4 MDVSA-2010:098 (kdenetwork4)
File : nvt/gb_mandriva_MDVSA_2010_098.nasl
2010-05-28 Name : Fedora Update for kdemultimedia FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdemultimedia_fc11.nasl
2010-05-28 Name : Fedora Update for kdenetwork FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdenetwork_fc11.nasl
2010-05-28 Name : Fedora Update for kdepim-runtime FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdepim-runtime_fc11.nasl
2010-05-28 Name : Fedora Update for kdepim FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdepim_fc11.nasl
2010-05-28 Name : Fedora Update for kdepimlibs FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdepimlibs_fc11.nasl
2010-05-28 Name : Fedora Update for kdeplasma-addons FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeplasma-addons_fc11.nasl
2010-05-28 Name : Fedora Update for kdesdk FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdesdk_fc11.nasl
2010-05-28 Name : Fedora Update for kdetoys FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdetoys_fc11.nasl
2010-05-28 Name : Fedora Update for kdeutils FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kdeutils_fc11.nasl
2010-05-28 Name : Fedora Update for oxygen-icon-theme FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_oxygen-icon-theme_fc11.nasl
2010-05-28 Name : Fedora Update for oxygen-icon-theme FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_oxygen-icon-theme_fc12.nasl
2010-05-28 Name : Fedora Update for kde-l10n FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kde-l10n_fc12.nasl
2010-05-28 Name : Fedora Update for kdeaccessibility FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeaccessibility_fc12.nasl
2010-05-28 Name : Fedora Update for kdeadmin FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeadmin_fc12.nasl
2010-05-28 Name : Fedora Update for kdeartwork FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeartwork_fc12.nasl
2010-05-28 Name : Fedora Update for kdebase-runtime FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdebase-runtime_fc12.nasl
2010-05-28 Name : Fedora Update for kdebase-workspace FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdebase-workspace_fc12.nasl
2010-05-28 Name : Fedora Update for kdebase FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdebase_fc12.nasl
2010-05-28 Name : Fedora Update for kdebindings FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdebindings_fc12.nasl
2010-05-28 Name : Fedora Update for kdeedu FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeedu_fc12.nasl
2010-05-28 Name : Fedora Update for kdegames FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdegames_fc12.nasl
2010-05-28 Name : Fedora Update for kdegraphics FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdegraphics_fc12.nasl
2010-05-28 Name : Fedora Update for kdelibs FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdelibs_fc12.nasl
2010-05-28 Name : Fedora Update for kdemultimedia FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdemultimedia_fc12.nasl
2010-05-28 Name : Fedora Update for kdenetwork FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdenetwork_fc12.nasl
2010-05-28 Name : Fedora Update for kdepim-runtime FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdepim-runtime_fc12.nasl
2010-05-28 Name : Fedora Update for kdepim FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdepim_fc12.nasl
2010-05-28 Name : Fedora Update for kdepimlibs FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdepimlibs_fc12.nasl
2010-05-28 Name : Fedora Update for kdeplasma-addons FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeplasma-addons_fc12.nasl
2010-05-28 Name : Fedora Update for kdesdk FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdesdk_fc12.nasl
2010-05-28 Name : Fedora Update for kdetoys FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdetoys_fc12.nasl
2010-05-28 Name : Fedora Update for kdeutils FEDORA-2010-8544
File : nvt/gb_fedora_2010_8544_kdeutils_fc12.nasl
2010-05-28 Name : Fedora Update for kde-l10n FEDORA-2010-8547
File : nvt/gb_fedora_2010_8547_kde-l10n_fc11.nasl
2010-05-17 Name : Ubuntu Update for kdenetwork vulnerability USN-938-1
File : nvt/gb_ubuntu_USN_938_1.nasl
2010-03-12 Name : Mandriva Update for urpmi MDVA-2010:098 (urpmi)
File : nvt/gb_mandriva_MDVA_2010_098.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
64690 KDE KGet file Element name Attribute Traversal Arbitrary File Creation

Nessus® Vulnerability Scanner

Date Description
2014-12-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201412-08.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_3_kdenetwork4-101119.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2011-0465.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_kde4-kdnssd-101119.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_kdenetwork3-101119.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_2_kdenetwork4-101119.nasl - Type : ACT_GATHER_INFO
2011-05-03 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2011-081.nasl - Type : ACT_GATHER_INFO
2011-04-27 Name : The remote Fedora host is missing a security update.
File : fedora_2011-5774.nasl - Type : ACT_GATHER_INFO
2011-04-22 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-0465.nasl - Type : ACT_GATHER_INFO
2011-04-21 Name : The remote Fedora host is missing a security update.
File : fedora_2011-5211.nasl - Type : ACT_GATHER_INFO
2010-12-16 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_kde4-kdnssd-101119.nasl - Type : ACT_GATHER_INFO
2010-12-01 Name : The remote Fedora host is missing a security update.
File : fedora_2010-18029.nasl - Type : ACT_GATHER_INFO
2010-07-01 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-8577.nasl - Type : ACT_GATHER_INFO
2010-07-01 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-8547.nasl - Type : ACT_GATHER_INFO
2010-07-01 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-8544.nasl - Type : ACT_GATHER_INFO
2010-05-19 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2010-098.nasl - Type : ACT_GATHER_INFO
2010-05-14 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-938-1.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/40141
BUGTRAQ http://www.securityfocus.com/archive/1/511281/100/0/threaded
http://www.securityfocus.com/archive/1/511294/100/0/threaded
CONFIRM http://www.kde.org/info/security/advisory-20100513-1.txt
FEDORA http://lists.fedoraproject.org/pipermail/package-announce/2010-November/05169...
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
MISC http://secunia.com/secunia_research/2010-69/
MLIST http://marc.info/?l=oss-security&m=127378789518426&w=2
OSVDB http://osvdb.org/64690
SECTRACK http://securitytracker.com/id?1023984
SECUNIA http://secunia.com/advisories/39528
http://secunia.com/advisories/39787
http://secunia.com/advisories/42423
SUSE http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
UBUNTU http://www.ubuntu.com/usn/USN-938-1
VUPEN http://www.vupen.com/english/advisories/2010/1142
http://www.vupen.com/english/advisories/2010/1144
http://www.vupen.com/english/advisories/2010/3096
http://www.vupen.com/english/advisories/2011/1101
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/58628

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2020-05-23 00:25:27
  • Multiple Updates
2018-10-11 00:19:49
  • Multiple Updates
2017-08-17 09:22:57
  • Multiple Updates
2016-06-28 18:05:29
  • Multiple Updates
2016-04-26 19:39:50
  • Multiple Updates
2014-12-16 13:24:34
  • Multiple Updates
2014-06-14 13:28:28
  • Multiple Updates
2014-02-17 10:54:20
  • Multiple Updates
2013-05-10 23:20:46
  • Multiple Updates