VulnerabilityModified
CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
MEDIUM 5.8EPSS 3.85%
Does this matter?
Lower severity and a low EPSS score (3.85%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
- EPSS
- 3.85% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- kde/kde sc
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://marc.info/?l=oss-security&m=127378789518426&w=2
- http://osvdb.org/64690
- http://secunia.com/advisories/39528Vendor Advisory
- http://secunia.com/advisories/39787Vendor Advisory
- http://secunia.com/advisories/42423Vendor Advisory
- http://secunia.com/secunia_research/2010-69/Vendor Advisory
- http://securitytracker.com/id?1023984
- http://www.kde.org/info/security/advisory-20100513-1.txtVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
- http://www.securityfocus.com/archive/1/511281/100/0/threaded
- http://www.securityfocus.com/archive/1/511294/100/0/threaded
- http://www.securityfocus.com/bid/40141
- http://www.ubuntu.com/usn/USN-938-1
- http://www.vupen.com/english/advisories/2010/1142Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1144Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3096Vendor Advisory
- http://www.vupen.com/english/advisories/2011/1101
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://marc.info/?l=oss-security&m=127378789518426&w=2
- http://osvdb.org/64690
- http://secunia.com/advisories/39528Vendor Advisory
- http://secunia.com/advisories/39787Vendor Advisory
- http://secunia.com/advisories/42423Vendor Advisory
- http://secunia.com/secunia_research/2010-69/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.