Test ID:	1.3.6.1.4.1.25623.1.0.60876
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2008-116-01)
Summary:	The remote host is missing an update for the 'kdelibs' package(s) announced via the SSA:2008-116-01 advisory.
Description:	Summary: The remote host is missing an update for the 'kdelibs' package(s) announced via the SSA:2008-116-01 advisory. Vulnerability Insight: New kdelibs packages are available for Slackware 12.0 and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] As well as from the KDE web site: [link moved to references] Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/kdelibs-3.5.7-i486-4_slack12.0.tgz: Patched to fix a security problem. From the KDE advisory: 'If start_kdeinit is installed as setuid root, a local user might be able to send unix signals to other processes, cause a denial of service or even possibly execute arbitrary code.' This issue affects KDE 3.5.5 through KDE 3.5.9. We recommend upgrading to the new kdelibs package as soon as possible. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'kdelibs' package(s) on Slackware 12.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1671 1019924 http://www.securitytracker.com/id?1019924 28938 http://www.securityfocus.com/bid/28938 29951 http://secunia.com/advisories/29951 29977 http://secunia.com/advisories/29977 30113 http://secunia.com/advisories/30113 ADV-2008-1370 http://www.vupen.com/english/advisories/2008/1370/references GLSA-200804-30 http://security.gentoo.org/glsa/glsa-200804-30.xml MDVSA-2008:097 http://www.mandriva.com/security/advisories?name=MDVSA-2008:097 SUSE-SR:2008:011 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html USN-608-1 http://www.ubuntu.com/usn/usn-608-1 ftp://ftp.kde.org/pub/kde/security_patches/post-kde-3.5.5-kinit.diff http://www.kde.org/info/security/advisory-20080426-2.txt kde-startkdeinit-privilege-escalation(42039) https://exchange.xforce.ibmcloud.com/vulnerabilities/42039
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.