CVE-2010-1000 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-1000 Interim 1 33 2024-10-24T02:03:06Z current 2021-05-30T12:50:47Z 2024-10-24T02:03:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-1000 Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QQHP7MDAGKGRMVUG64TKDHFDLMRIRJQG/#QQHP7MDAGKGRMVUG64TKDHFDLMRIRJQG E-Mail link for SUSE-SR:2010:024 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Leap 15.0 openSUSE Tumbleweed kde4-kget-4.1.3-7.9.1 kde4-knewsticker-4.1.3-7.9.1 kde4-kopete-4.1.3-7.9.1 kde4-krdc-4.1.3-7.9.1 kde4-krfb-4.1.3-7.9.1 kdenetwork-filesharing-21.08.1-1.2 kdenetwork-filesharing-lang-21.08.1-1.2 kdenetwork4 kdenetwork4-filesharing kdenetwork4-filesharing-16.12.0-1.1 kdenetwork4-filesharing-17.12.3-lp150.1.1 kdenetwork4-filesharing-4.1.3-7.9.1 kdenetwork4-filesharing-4.3.5-0.4.1 kdenetwork4-filesharing-lang-17.12.3-lp150.1.1 kdnssd-16.12.0-1.1 kget-16.12.0-1.1 kget-4.3.5-0.4.1 kopete-16.12.0-1.1 kopete-4.3.5-0.4.1 kopete-devel-16.12.0-1.1 kopete-devel-4.3.5-0.4.1 kppp-16.12.0-1.1 krdc-16.12.0-1.1 krdc-4.3.5-0.4.1 krdc-devel-16.12.0-1.1 krfb-16.12.0-1.1 krfb-4.3.5-0.4.1 kde4-kget-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kde4-knewsticker-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kde4-kopete-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kde4-krdc-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kde4-krfb-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kdenetwork4-filesharing-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server 11 kdenetwork4-filesharing-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kget-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kopete-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA krdc-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA krfb-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA kdenetwork4-filesharing-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 kget-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 kopete-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 krdc-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 krfb-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 kdenetwork4-filesharing-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 kget-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 kopete-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 krdc-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 krfb-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 kdenetwork4-filesharing-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 kget-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 kopete-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 krdc-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 krfb-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 kde4-kget-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kde4-knewsticker-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kde4-kopete-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kde4-krdc-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kde4-krfb-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kdenetwork4-filesharing-4.1.3-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kopete-devel-4.3.5-0.4.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 kdenetwork4-filesharing-17.12.3-lp150.1.1 as a component of openSUSE Leap 15.0 kdenetwork4-filesharing-lang-17.12.3-lp150.1.1 as a component of openSUSE Leap 15.0 kdenetwork-filesharing-21.08.1-1.2 as a component of openSUSE Tumbleweed kdenetwork-filesharing-lang-21.08.1-1.2 as a component of openSUSE Tumbleweed kdenetwork4-filesharing-16.12.0-1.1 as a component of openSUSE Tumbleweed kdnssd-16.12.0-1.1 as a component of openSUSE Tumbleweed kget-16.12.0-1.1 as a component of openSUSE Tumbleweed kopete-16.12.0-1.1 as a component of openSUSE Tumbleweed kopete-devel-16.12.0-1.1 as a component of openSUSE Tumbleweed kppp-16.12.0-1.1 as a component of openSUSE Tumbleweed krdc-16.12.0-1.1 as a component of openSUSE Tumbleweed krdc-devel-16.12.0-1.1 as a component of openSUSE Tumbleweed krfb-16.12.0-1.1 as a component of openSUSE Tumbleweed kdenetwork4 as a component of SUSE Linux Enterprise Desktop 11 kdenetwork4-filesharing as a component of SUSE Linux Enterprise Server 11 kdenetwork4 as a component of SUSE Linux Enterprise Server 11 kdenetwork4 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata kdenetwork4 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata kdenetwork4 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kdenetwork4 as a component of SUSE Linux Enterprise Software Development Kit 11 Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. CVE-2010-1000 SUSE Linux Enterprise Server 11:kde4-kget-4.1.3-7.9.1 SUSE Linux Enterprise Server 11:kde4-knewsticker-4.1.3-7.9.1 SUSE Linux Enterprise Server 11:kde4-kopete-4.1.3-7.9.1 SUSE Linux Enterprise Server 11:kde4-krdc-4.1.3-7.9.1 SUSE Linux Enterprise Server 11:kde4-krfb-4.1.3-7.9.1 SUSE Linux Enterprise Server 11:kdenetwork4-filesharing-4.1.3-7.9.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kdenetwork4-filesharing-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kget-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:kopete-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:krdc-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:krfb-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP2:kdenetwork4-filesharing-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP2:kget-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP2:kopete-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP2:krdc-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP2:krfb-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP3:kdenetwork4-filesharing-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP3:kget-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP3:kopete-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP3:krdc-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP3:krfb-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP4:kdenetwork4-filesharing-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP4:kget-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP4:kopete-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP4:krdc-4.3.5-0.4.1 SUSE Linux Enterprise Server 11 SP4:krfb-4.3.5-0.4.1 SUSE Linux Enterprise Server for SAP Applications 11:kde4-kget-4.1.3-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:kde4-knewsticker-4.1.3-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:kde4-kopete-4.1.3-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:kde4-krdc-4.1.3-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:kde4-krfb-4.1.3-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:kdenetwork4-filesharing-4.1.3-7.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:kopete-devel-4.3.5-0.4.1 openSUSE Leap 15.0:kdenetwork4-filesharing-17.12.3-lp150.1.1 openSUSE Leap 15.0:kdenetwork4-filesharing-lang-17.12.3-lp150.1.1 openSUSE Tumbleweed:kdenetwork-filesharing-21.08.1-1.2 openSUSE Tumbleweed:kdenetwork-filesharing-lang-21.08.1-1.2 openSUSE Tumbleweed:kdenetwork4-filesharing-16.12.0-1.1 openSUSE Tumbleweed:kdnssd-16.12.0-1.1 openSUSE Tumbleweed:kget-16.12.0-1.1 openSUSE Tumbleweed:kopete-16.12.0-1.1 openSUSE Tumbleweed:kopete-devel-16.12.0-1.1 openSUSE Tumbleweed:kppp-16.12.0-1.1 openSUSE Tumbleweed:krdc-16.12.0-1.1 openSUSE Tumbleweed:krdc-devel-16.12.0-1.1 openSUSE Tumbleweed:krfb-16.12.0-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P