Description
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.debian.org/security/2003/dsa-243 ↗
- http://www.debian.org/security/2003/dsa-236 ↗
- http://www.debian.org/security/2003/dsa-234 ↗
- http://www.debian.org/security/2003/dsa-242 ↗
- http://www.debian.org/security/2003/dsa-235 ↗
- http://www.debian.org/security/2003/dsa-241 ↗
- http://secunia.com/advisories/8103 ↗
- http://secunia.com/advisories/8067 ↗
- http://www.debian.org/security/2003/dsa-239 ↗
- http://www.redhat.com/support/errata/RHSA-2003-002.html ↗
- http://www.debian.org/security/2003/dsa-240 ↗
- http://www.redhat.com/support/errata/RHSA-2003-003.html ↗
- http://marc.info/?l=bugtraq&m=104049734911544&w=2 ↗
- http://www.securityfocus.com/bid/6462 ↗
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569 ↗
- http://www.debian.org/security/2003/dsa-238 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:004 ↗
- http://marc.info/?l=bugtraq&m=104066520330397&w=2 ↗
- http://www.kde.org/info/security/advisory-20021220-1.txt ↗
- http://www.debian.org/security/2003/dsa-237 ↗