Test ID:	1.3.6.1.4.1.25623.1.0.67294
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: kdebase
Summary:	FreeBSD Ports: kdebase
Description:	The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: kdebase kdebase-workspace CVE-2010-0436 Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm. Solution: Update your system with the appropriate patches or software upgrades. http://www.kde.org/info/security/advisory-20100413-1.txt http://www.vuxml.org/freebsd/3987c5d1-47a9-11df-a0d5-0016d32f24fb.html
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0436 Debian Security Information: DSA-2037 (Google Search) http://www.debian.org/security/2010/dsa-2037 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039533.html RedHat Security Advisories: RHSA-2010:0348 http://rhn.redhat.com/errata/RHSA-2010-0348.html SuSE Security Announcement: SUSE-SR:2010:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html BugTraq ID: 39467 http://www.securityfocus.com/bid/39467 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9999 http://secunia.com/advisories/39419 http://secunia.com/advisories/39481 http://secunia.com/advisories/39506 http://www.vupen.com/english/advisories/2010/0879 XForce ISS Database: kde-kdm-privilege-escalation(57823) http://xforce.iss.net/xforce/xfdb/57823
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: