Test ID:	50323
Category:	Fedora Local Security Checks
Title:	Fedora Core 1 FEDORA-2004-133 (kdepim)
Summary:	Fedora Core 1 FEDORA-2004-133 (kdepim)
Description:	The remote host is missing an update to kdepim announced via advisory FEDORA-2004-133. A PIM (Personal Information Manager) for KDE. Update Information: The KDE team found a buffer overflow in the file information reader of VCF files. An attacker could construct a VCF file so that when it was opened by a victim it would execute arbitrary commands. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0988 to this issue. * Thu Dec 18 2003 Than Ngo 6:3.1.4-2 - added patch from KDE stable branch to fix buffer overflow in vcf This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 20a4f053aba0eccfd4e22b816714e27a SRPMS/kdepim-3.1.4-2.src.rpm 216304bb47999422716bc39b1b992d5e i386/kdepim-3.1.4-2.i386.rpm a1b17e1958b623c414751bfb0044bf37 i386/debug/kdepim-debuginfo-3.1.4-2.i386.rpm e750576e7c01bdc9242fc31299cd07b4 i386/kdepim-devel-3.1.4-2.i386.rpm 1c5694e3993b93e5a242a4acb725e18c x86_64/kdepim-3.1.4-2.x86_64.rpm f7fa93f04c386d21cbdd380c9606766d x86_64/debug/kdepim-debuginfo-3.1.4-2.x86_64.rpm 2024ae0a406a8aaf39e00a5997cc76f0 x86_64/kdepim-devel-3.1.4-2.x86_64.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://www.fedoranews.org/updates/FEDORA-2004-133.shtml Risk factor : High
Cross-Ref:	BugTraq ID: 9419 Common Vulnerability Exposure (CVE) ID: CVE-2003-0988 Bugtraq: 20040114 KDE Security Advisory: VCF file information reader vulnerability (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=107412130407906&w=2 Conectiva Linux advisory: CLA-2004:810 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000810 http://security.gentoo.org/glsa/glsa-200404-02.xml http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:003 http://www.redhat.com/support/errata/RHSA-2004-005.html http://www.redhat.com/support/errata/RHSA-2004-006.html CERT/CC vulnerability note: VU#820798 http://www.kb.cert.org/vuls/id/820798 http://www.securityfocus.com/bid/9419 XForce ISS Database: kde-kdepim-bo(14833) http://xforce.iss.net/xforce/xfdb/14833 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:858 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:865
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 24808 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: