Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kde | Kde | 3.3 (including) | 3.3 (including) |
| Kde | Kde | 3.3.1 (including) | 3.3.1 (including) |
| Kde | Kde | 3.3.2 (including) | 3.3.2 (including) |
| Kdeedu | Ubuntu | dapper | * |
| Kdeedu | Ubuntu | devel | * |
| Kdeedu | Ubuntu | edgy | * |
| Kdeedu | Ubuntu | feisty | * |
References
- http://secunia.com/advisories/14306
- http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml
- http://www.kde.org/info/security/advisory-20050215-1.txt
- http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html
- http://secunia.com/advisories/14306
- http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml
- http://www.kde.org/info/security/advisory-20050215-1.txt
- http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html