CVE-2010-1000

MEDIUM 5.8CVE-2010-1000 · Published 17/05/2010 · updated 16/06/2026

In short

CVE-2010-1000 is a MEDIUM (CVSS 5.8) vulnerability affecting kde sc (kde).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kde sc kde	`= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.80= 4.1.85= 4.1.96= 4.2= 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.3.0= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.4.0= 4.4.1= 4.4.2= 4.4.3`	No fix yet

Description

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

References

lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
marc.info
osvdb.org/64690
secunia.com/advisories/39528 · Vendor Advisory
secunia.com/advisories/39787 · Vendor Advisory
secunia.com/advisories/42423 · Vendor Advisory
secunia.com/secunia_research/2010-69 · Vendor Advisory
securitytracker.com/id
kde.org/info/security/advisory-20100513-1.txt · Vendor Advisory
mandriva.com/security/advisories
securityfocus.com/archive/1/511281/100/0/threaded

More vulnerabilities in kde sc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kde sc

kde

= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.80= 4.1.85= 4.1.96= 4.2= 4.2.0= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.3.0= 4.3.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.4.0= 4.4.1= 4.4.2= 4.4.3

No fix yet

More vulnerabilities in kde sc

See all →