Test ID:	1.3.6.1.4.1.25623.1.0.58172
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:072 (kdelibs)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to kdelibs announced via advisory MDKSA-2007:072. The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in a FTP PASV command. Updated packages have been patched to address this issue. Affected: 2007.0, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:072 Risk factor : High CVSS Score: 6.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1564 BugTraq ID: 23091 http://www.securityfocus.com/bid/23091 http://www.mandriva.com/security/advisories?name=MDKSA-2007:072 http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10646 http://www.redhat.com/support/errata/RHSA-2007-0909.html http://securitytracker.com/id?1017801 http://secunia.com/advisories/24889 http://secunia.com/advisories/27108 SuSE Security Announcement: SUSE-SR:2007:006 (Google Search) http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.ubuntu.com/usn/usn-447-1 http://www.vupen.com/english/advisories/2007/1076
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.