• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

KDE Secure Cookie Exposure Vulnerability

Solution:
RedHat has released an advisory, RHSA-2002:220-40, that contains many fixes. Information about obtaining and applying fixes are available in the referenced advisory.

The vendor has addressed this issue in KDE 3.0.3. Users are advised to upgrade. Patches are also available.


KDE KDE 3.0

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches

KDE KDE 3.0.1

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches

KDE KDE 3.0.2

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches