Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

KDE DCOPServer Insecure Temporary File Creation Vulnerability

Solution:
Gentoo Linux has released advisory GLSA 200408-13 addressing this, and other issues. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following commands with superuser privileges:
emerge sync
emerge -pv ">=kde-base/kdebase-3.2.3-r1"
emerge ">=kde-base/kdebase-3.2.3-r1"
emerge -pv ">=kde-base/kdelibs-3.2.3-r1"
emerge ">=kde-base/kdelibs-3.2.3-r1"

OpenBSD has included patches to fix this issue in OpenBSD-current as of 14 Aug 2004. These patches have not been included in 3.4 or 3.5 at the time of this update.

Mandrake Linux has released an advisory (MDKSA-2004:086) along with fixes to address this, and other issues. Please see the referenced advisory for further information.

KDE has released patches resolving this issue:

Conectiva Linux has released advisory CLA-2004:864 along with fixes dealing with this and other issues. Please see the referenced advisory for more information.


KDE KDE 3.2

KDE KDE 3.2.1

KDE KDE 3.2.2

KDE KDE 3.2.3







 

Privacy Statement
Copyright 2008, SecurityFocus