Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2011-1094
HistoryMar 16, 2011 - 10:55 p.m.

CVE-2011-1094

2011-03-1622:55:04
Debian Security Bug Tracker
security-tracker.debian.org
12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.4%

JSON

kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.

OSVersionArchitecturePackageVersionFilename
Debian10allkde4libs< 4:4.4.5-4kde4libs_4:4.4.5-4_all.deb

Related

securityvulns 2
ubuntucve 2
prion 2
cvelist 2
openvas 31
nessus 21
nvd 2
cve 2
fedora 52
debian 1
ubuntu 2
veracode 1
debiancve 1
redhat 1
oraclelinux 1
gentoo 1
securityvulns
securityvulns
KDE KSSL certificate spoofing
2011-04-11 00:00:00
[USN-1110-1] KDE-Libs vulnerabilities
2011-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2011-1094
2011-03-16 00:00:00
CVE-2009-2702
2009-09-08 00:00:00
prion
prion
Design/Logic Flaw
2011-03-16 22:55:00
Design/Logic Flaw
2009-09-08 18:30:00
cvelist
cvelist
CVE-2011-1094
2011-03-16 22:00:00
CVE-2009-2702
2009-09-08 18:00:00
openvas
openvas
Mandriva Update for kdelibs4 MDVSA-2011:071 (kdelibs4)
2011-04-11 00:00:00
Mandriva Update for kdelibs4 MDVSA-2011:071 (kdelibs4)
2011-04-11 00:00:00
Fedora Core 10 FEDORA-2009-9427 (akonadi)
2009-09-15 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2011:071)
2011-04-11 00:00:00
Debian DSA-1916-1 : kdelibs - insufficient input validation
2010-02-24 00:00:00
Fedora 10 : akonadi-1.2.1-1.fc10 / kde-l10n-4.3.1-2.fc10 / kdeaccessibility-4.3.1-1.fc10 / etc (2009-9427)
2009-09-16 00:00:00
nvd
nvd
CVE-2011-1094
2011-03-16 22:55:04
CVE-2009-2702
2009-09-08 18:30:00
cve
cve
CVE-2011-1094
2011-03-16 22:55:04
CVE-2009-2702
2009-09-08 18:30:00
fedora
fedora
[SECURITY] Fedora 11 Update: akonadi-1.2.1-1.fc11
2009-09-15 07:39:23
[SECURITY] Fedora 11 Update: kdemultimedia-4.3.1-1.fc11
2009-09-15 07:39:23
[SECURITY] Fedora 11 Update: kdelibs-experimental-4.3.1-1.fc11
2009-09-15 07:39:23
debian
debian
[SECURITY] [DSA 1916-1] New kdelibs packages fix SSL certificate verification weakness
2009-10-24 00:12:00
ubuntu
ubuntu
KDE-Libs vulnerability
2009-09-17 00:00:00
KDE-Libs vulnerabilities
2011-04-14 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 01:03:09
debiancve
debiancve
CVE-2009-2702
2009-09-08 18:30:00
redhat
redhat
(RHSA-2011:0464) Moderate: kdelibs security update
2011-04-21 00:00:00
oraclelinux
oraclelinux
kdelibs security update
2011-04-21 00:00:00
gentoo
gentoo
KDE Libraries: Multiple vulnerabilities
2014-06-29 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.4%

JSON
Related for DEBIANCVE:CVE-2011-1094
securityvulns2ubuntucve2prion2cvelist2openvas31nessus21nvd2cve2fedora52debian1ubuntu2veracode1debiancve1redhat1oraclelinux1gentoo1