Executive Summary

Informations
Name CVE-2014-3494 First vendor Publication 2014-07-01
Vendor Cve Last vendor Modification 2018-10-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3494

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-200 Information Exposure

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 23
Os 1

Nessus® Vulnerability Scanner

Date Description
2015-03-24 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2015-251.nasl - Type : ACT_GATHER_INFO
2014-07-17 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_4a1143310d2411e48dd25453ed2e2b49.nasl - Type : ACT_GATHER_INFO
2014-07-06 Name : The remote Fedora host is missing a security update.
File : fedora_2014-7572.nasl - Type : ACT_GATHER_INFO
2014-07-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-7579.nasl - Type : ACT_GATHER_INFO
2014-06-30 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201406-34.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/68113
CONFIRM http://quickgit.kde.org/?p=kdelibs.git&a=commitdiff&h=bbae87dc1be3ae0...
http://www.kde.org/info/security/advisory-20140618-1.txt
SUSE http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
Date Informations
2021-05-04 12:32:20
  • Multiple Updates
2021-04-22 01:39:24
  • Multiple Updates
2020-05-23 00:41:04
  • Multiple Updates
2018-10-31 00:20:38
  • Multiple Updates
2018-01-26 12:05:34
  • Multiple Updates
2016-04-27 00:51:04
  • Multiple Updates
2015-09-29 09:23:05
  • Multiple Updates
2015-03-27 09:26:39
  • Multiple Updates
2015-03-25 13:28:19
  • Multiple Updates
2014-07-18 13:24:31
  • Multiple Updates
2014-07-07 13:24:40
  • Multiple Updates
2014-07-03 13:24:52
  • Multiple Updates
2014-07-02 21:24:28
  • Multiple Updates
2014-07-01 21:24:50
  • First insertion