Lucene search
HistoryJul 01, 2014 - 4:55 p.m.
CVE-2014-3494
cve-2014-3494
kio/usernotificationhandler.cpp
kdelibs 4.10.95
4.13.3
man-in-the-middle
invalid certificate
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
8.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.
Affected configurations
Node
opensuseopensuseMatch13.1
Node
kdekdelibsMatch4.10.97
ORkdekdelibsMatch4.11.0
ORkdekdelibsMatch4.11.1
ORkdekdelibsMatch4.11.2
ORkdekdelibsMatch4.11.3
ORkdekdelibsMatch4.11.4
ORkdekdelibsMatch4.11.5
ORkdekdelibsMatch4.11.80
ORkdekdelibsMatch4.11.90
ORkdekdelibsMatch4.11.95
ORkdekdelibsMatch4.11.97
ORkdekdelibsMatch4.12.0
ORkdekdelibsMatch4.12.1
ORkdekdelibsMatch4.12.2
ORkdekdelibsMatch4.12.3
ORkdekdelibsMatch4.12.4
ORkdekdelibsMatch4.12.5
ORkdekdelibsMatch4.12.80
ORkdekdelibsMatch4.12.90
ORkdekdelibsMatch4.12.95
ORkdekdelibsMatch4.12.97
ORkdekdelibsMatch4.13.0
ORkdekdelibsMatch4.13.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensuse:opensuse | opensuse | eq | 13.1 |
Related
openvas
openvas
Fedora Update for kdelibs FEDORA-2014-7579
2014-07-01 00:00:00
Fedora Update for kdelibs FEDORA-2014-7572
2014-07-07 00:00:00
Fedora Update for kdelibs FEDORA-2014-11348
2014-10-11 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: kdelibs-4.11.5-4.fc19
2014-07-06 00:55:15
[SECURITY] Fedora 20 Update: kdelibs-4.12.5-4.fc20
2014-07-01 07:23:33
[SECURITY] Fedora 19 Update: kdelibs-4.11.5-5.fc19
2014-10-10 15:56:37
cvelist
cvelist
CVE-2014-3494
2014-07-01 16:00:00
nessus
nessus
Fedora 20 : kdelibs-4.12.5-4.fc20 (2014-7579)
2014-07-02 00:00:00
FreeBSD : kdelibs4 -- KMail/KIO POP3 SSL Man-in-the-middle Flaw (4a114331-0d24-11e4-8dd2-5453ed2e2b49)
2014-07-17 00:00:00
Fedora 19 : kdelibs-4.11.5-4.fc19 (2014-7572)
2014-07-06 00:00:00
ubuntucve
ubuntucve
CVE-2014-3494
2014-07-01 00:00:00
prion
prion
Code injection
2014-07-01 16:55:00
freebsd
freebsd
kdelibs4 -- KMail/KIO POP3 SSL Man-in-the-middle Flaw
2014-06-17 00:00:00
debiancve
debiancve
CVE-2014-3494
2014-07-01 16:55:02
nvd
nvd
CVE-2014-3494
2014-07-01 16:55:02
gentoo
gentoo
KDE Libraries: Multiple vulnerabilities
2014-06-29 00:00:00
mageia
mageia
Updated KDE 4 and related packages move to KDE 4.12.5
2014-10-29 14:30:40
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
8.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
Related for CVE-2014-3494