Red Hat Security AdvisoryRHSA-2007:0905
kdebase security update
Released 2007-10-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kdebase-6:3.5.4-15.el5, kdebase-6:3.5.4-15.el5.i386, kdebase-6:3.5.4-15.el5.ia64 +5
- Red Hat Enterprise Linux AS version 4 kdebase-6:3.3.1-6.el4, kdebase-6:3.3.1-6.el4.i386, kdebase-6:3.3.1-6.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) kdebase-6:3.5.4-15.el5, kdebase-6:3.5.4-15.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) kdebase-6:3.5.4-15.el5, kdebase-devel-6:3.5.4-15.el5, kdebase-devel-6:3.5.4-15.el5.i386
- Red Hat Enterprise Linux Desktop version 4 kdebase-6:3.3.1-6.el4, kdebase-6:3.3.1-6.el4.i386, kdebase-devel-6:3.3.1-6.el4 +1
- Red Hat Enterprise Linux ES version 4 kdebase-6:3.3.1-6.el4, kdebase-6:3.3.1-6.el4.i386, kdebase-6:3.3.1-6.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 kdebase-6:3.3.1-6.el4, kdebase-6:3.3.1-6.el4.i386, kdebase-6:3.3.1-6.el4.ia64 +3
Fixes 3 records
Priority LOW 32
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via un…
CVSS 2.0MEDIUM 6.8· Local · Low privileges · Interaction — · EPSS 0.01015 · Published 2007-09-21 · Fixed CWE-264
Priority LOW 24
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01831 · Published 2007-08-08 · Fixed CWE-59
Priority LOW 18
konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02562 · Published 2007-07-17 · Fixed
