NVD

Id
12536  
Name
CVE-2010-1000  
Description
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-17  
Modified Date
2011-09-06  
Seq
2010-1000  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68980 12536 CVE-2010-1000 FEDORA-2010-18029  View
68981 12536 CVE-2010-1000 FEDORA-2011-5211  View
68982 12536 CVE-2010-1000 SUSE-SR:2010:024  View
68983 12536 CVE-2010-1000 [oss-security] 20100513 KDENetwork vulnerabilities  View
68984 12536 CVE-2010-1000 1023984  View
68985 12536 CVE-2010-1000 http://www.kde.org/info/security/advisory-20100513-1.txt  View
68986 12536 CVE-2010-1000 MDVSA-2010:098  View
68987 12536 CVE-2010-1000 20100513 Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability  View
68988 12536 CVE-2010-1000 20100514 Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability  View
68989 12536 CVE-2010-1000 40141  View
68990 12536 CVE-2010-1000 USN-938-1  View
68991 12536 CVE-2010-1000 ADV-2010-1142  View
68992 12536 CVE-2010-1000 ADV-2010-1144  View
68993 12536 CVE-2010-1000 ADV-2010-3096  View
68994 12536 CVE-2010-1000 ADV-2011-1101  View
68995 12536 CVE-2010-1000 kde-name-directory-traversal(58628)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38797 JVNDB-2010-004582 KDE SC の KGet におけるディレクトリトラバーサルの脆弱性 KDE SC の KGet には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1000 43580 CVE-2010-1000 12536 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004582.html 2010-05-13 2012-09-25 View