NVD

Id
13035  
Name
CVE-2010-1511  
Description
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-17  
Modified Date
2010-12-10  
Seq
2010-1511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72142 13035 CVE-2010-1511 FEDORA-2010-18029  View
72143 13035 CVE-2010-1511 [oss-security] 20100513 KDENetwork vulnerabilities  View
72144 13035 CVE-2010-1511 1023984  View
72145 13035 CVE-2010-1511 http://www.kde.org/info/security/advisory-20100513-1.txt  View
72146 13035 CVE-2010-1511 20100513 Secunia Research: KDE KGet Insecure File Operation Vulnerability  View
72147 13035 CVE-2010-1511 20100514 Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability  View
72148 13035 CVE-2010-1511 40141  View
72149 13035 CVE-2010-1511 USN-938-1  View
72150 13035 CVE-2010-1511 ADV-2010-1142  View
72151 13035 CVE-2010-1511 ADV-2010-1144  View
72152 13035 CVE-2010-1511 ADV-2010-3096  View
72153 13035 CVE-2010-1511 kde-metalink-file-overwrite(58629)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38905 JVNDB-2010-004690 KDE SC の KGet における任意のファイルを上書きされる脆弱性 KDE SC の KGet は、ユーザからのダウンロード確認を適切に要求しないため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2010-1511 44091 CVE-2010-1511 13035 6.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004690.html 2010-05-13 2012-09-25 View