Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1511
HistoryMay 17, 2010 - 9:00 p.m.

CVE-2010-1511

2010-05-1721:00:01
CWE-264
[email protected]
web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

JSON

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

Affected configurations

NVD
Node
kdekgetMatch2.4.2
AND
kdekde_scMatch2.2.0
OR
kdekde_scMatch3.5.10
OR
kdekde_scMatch4.0.0
OR
kdekde_scMatch4.0.0alpha1
OR
kdekde_scMatch4.0.0alpha2
OR
kdekde_scMatch4.0.0beta1
OR
kdekde_scMatch4.0.0beta2
OR
kdekde_scMatch4.0.0beta3
OR
kdekde_scMatch4.0.0beta4
OR
kdekde_scMatch4.0.0rc1
OR
kdekde_scMatch4.0.0rc2
OR
kdekde_scMatch4.0.1
OR
kdekde_scMatch4.0.2
OR
kdekde_scMatch4.0.3
OR
kdekde_scMatch4.0.4
OR
kdekde_scMatch4.0.5
OR
kdekde_scMatch4.1.0
OR
kdekde_scMatch4.1.0alpha1
OR
kdekde_scMatch4.1.0beta1
OR
kdekde_scMatch4.1.0beta2
OR
kdekde_scMatch4.1.0rc
OR
kdekde_scMatch4.1.1
OR
kdekde_scMatch4.1.2
OR
kdekde_scMatch4.1.3
OR
kdekde_scMatch4.1.4
OR
kdekde_scMatch4.1.80
OR
kdekde_scMatch4.1.85
OR
kdekde_scMatch4.1.96
OR
kdekde_scMatch4.2beta2
OR
kdekde_scMatch4.2rc
OR
kdekde_scMatch4.2.0
OR
kdekde_scMatch4.2.1
OR
kdekde_scMatch4.2.2
OR
kdekde_scMatch4.2.3
OR
kdekde_scMatch4.2.4
OR
kdekde_scMatch4.3.0
OR
kdekde_scMatch4.3.0beta1
OR
kdekde_scMatch4.3.0beta3
OR
kdekde_scMatch4.3.0rc1
OR
kdekde_scMatch4.3.0rc2
OR
kdekde_scMatch4.3.0rc3
OR
kdekde_scMatch4.3.1
OR
kdekde_scMatch4.3.2
OR
kdekde_scMatch4.3.3
OR
kdekde_scMatch4.3.4
OR
kdekde_scMatch4.3.5
OR
kdekde_scMatch4.4.0
OR
kdekde_scMatch4.4.0beta1
OR
kdekde_scMatch4.4.0beta2
OR
kdekde_scMatch4.4.0rc1
OR
kdekde_scMatch4.4.0rc2
OR
kdekde_scMatch4.4.0rc3
OR
kdekde_scMatch4.4.1
OR
kdekde_scMatch4.4.2
OR
kdekde_scMatch4.4.3

Related

securityvulns 2
ubuntucve 1
cvelist 1
cve 1
prion 1
openvas 94
fedora 68
nessus 7
ubuntu 1
gentoo 1
securityvulns
securityvulns
Secunia Research: KDE KGet Insecure File Operation Vulnerability
2010-05-14 00:00:00
KDE KGet files overwrite
2010-05-14 00:00:00
ubuntucve
ubuntucve
CVE-2010-1511
2010-05-14 00:00:00
cvelist
cvelist
CVE-2010-1511
2010-05-17 20:42:00
cve
cve
CVE-2010-1511
2010-05-17 21:00:01
prion
prion
Cross site request forgery (csrf)
2010-05-17 21:00:00
openvas
openvas
Fedora Update for kdemultimedia FEDORA-2010-8544
2010-05-28 00:00:00
Fedora Update for kdenetwork FEDORA-2010-18029
2010-12-09 00:00:00
Fedora Update for kdebase FEDORA-2010-8544
2010-05-28 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: kde-l10n-4.4.3-1.fc12
2010-05-26 21:41:19
[SECURITY] Fedora 12 Update: kdegraphics-4.4.3-1.fc12.1
2010-05-26 21:41:20
[SECURITY] Fedora 12 Update: oxygen-icon-theme-4.4.3-1.fc12
2010-05-26 21:41:20
nessus
nessus
Fedora 12 : kdenetwork-4.4.5-4.fc12 (2010-18029)
2010-12-01 00:00:00
Mandriva Linux Security Advisory : kdenetwork4 (MDVSA-2010:098)
2010-05-19 00:00:00
Ubuntu 9.04 / 9.10 / 10.04 LTS : kdenetwork vulnerabilities (USN-938-1)
2010-05-14 00:00:00
ubuntu
ubuntu
KDENetwork vulnerabilities
2010-05-13 00:00:00
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2010
2014-12-11 00:00:00

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

JSON
Related for NVD:CVE-2010-1511
securityvulns2ubuntucve1cvelist1cve1prion1openvas94fedora68nessus7ubuntu1gentoo1