• info
• discussion
• exploit
• solution
• references

KDE kdesu Insecure Temporary File Creation Vulnerability

Solution:
Upgrade to version 2.1.2 or higher of the KDE core libraries.


RedHat arts-2.1.1-5.i386.rpm

• Red Hat 7.1 i386 arts-2.1.2-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/arts-2.1.2-1.i386.rpm

RedHat kdelibs-sound-devel-2.1.1-5.i386.rpm

• Red Hat 7.1 i386 kdelibs-sound-devel-2.1.2-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kdelibs-sound-devel-2.1.2-1.i3 86.rpm

RedHat kdelibs-2.1.1-5.i386.rpm

• Red Hat 7.1 i386 kdelibs-2.1.2-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kdelibs-2.1.2-1.i386.rpm

RedHat kdelibs-sound-2.1.1-5.i386.rpm

• Red Hat 7.1 i386 kdelibs-sound-2.1.2-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kdelibs-sound-2.1.2-1.i386.rpm

RedHat kdelibs-devel-2.1.1-5.i386.rpm

• Red Hat 7.1 i386 kdelibs-devel-2.1.2-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kdelibs-devel-2.1.2-1.i386.rpm

KDE kdelibs 2.1.1

• Mandrake 8.0 i386 arts-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/a rts-2.1.2-4mdk.i586.rpm


• Mandrake 8.0 i386 kdelibs-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/k delibs-2.1.2-4mdk.i586.rpm


• Mandrake 8.0 i386 kdelibs-devel-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/k delibs-devel-2.1.2-4mdk.i586.rpm


• Mandrake 8.0 i386 kdelibs-devel-static-libraries-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/k delibs-devel-static-libraries-2.1.2-4mdk.i586.rpm


• Mandrake 8.0 i386 libarts2-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/l ibarts2-2.1.2-4mdk.i586.rpm


• Mandrake 8.0 i386 libarts2-devel-2.1.2-4mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/l ibarts2-devel-2.1.2-4mdk.i586.rpm