--------------------------------------------------------------------------
Debian Security Advisory DSA 241-1                     security@debian.org 
Debian -- Security Information                              Martin Schulze
January 24th, 2003                       Debian -- Debian security FAQ 
--------------------------------------------------------------------------

Package        : kdeutils
Vulnerability  : several
Problem-type   : local, remote
Debian-specific: no
CVE Id         : CAN-2002-1393

The KDE team discovered several vulnerabilities in the K Desktop
Environment.  In some instances KDE fails to properly quote parametersof instructions passed to a command shell for execution.  These
parameters may incorporate data such as URLs, filenames and e-mail
addresses, and this data may be provided remotely to a victim in an
e-mail, a webpage or files on a network filesystem or other untrusted
source.

By carefully crafting such data an attacker might be able to execute
arbitary commands on a vulnerable system using the victim's account and
privileges.  The KDE Project is not aware of any existing exploits of
these vulnerabilities.  The patches also provide better safe guards
and check data from untrusted sources more strictly in multiple
places.

For the current stable distribution (woody), these problems have been fixed
in version 2.2.2-9.2.

The old stable distribution (potato) does not contain KDE packages.

For the unstable distribution (sid), these problems will most probably
not be fixed but new packages for KDE 3.1 for sid are expected for
this year.

We recommend that you upgrade your KDE packages.


Upgrade Instructions
--------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
--------------------------------

  Source archives:

      
      Size/MD5 checksum:      860 8591a1cec7cc63c3b9f2dc1c5cadcd31
      
      Size/MD5 checksum:    14829 0d39bcbfe9874bc7427bef0b850d2ad0
      
      Size/MD5 checksum:  1474615 717aa3449f128bff9591b09f04586a7e

  Alpha architecture:

      
      Size/MD5 checksum:   220580 4d774f7163330550c74ee278c34ac8ba
      
      Size/MD5 checksum:   257660 a448d1efdbc02d86c7621ec37da20946
      
      Size/MD5 checksum:    88292 4f244194714f608862edd40cdc62e8eb
      
      Size/MD5 checksum:   105414 1e8a8d9d9c41ba806f7e3f5f59859f30
      
      Size/MD5 checksum:    47350 4df9f9b310ec298cb2bb6994a1dfe285
      
      Size/MD5 checksum:    27232 f45a5d19dc796d0d5a1e2d8251adddb8
      
      Size/MD5 checksum:   220450 fd94dbc1396236237c1295fbdc4625df
      
      Size/MD5 checksum:   105908 38c3edf16c83194fba4af72baa080264
      
      Size/MD5 checksum:    79484 a0d8428062d21bfad6f084c8a2837d37
      
      Size/MD5 checksum:    48948 ecc3685640ea65799a613ae40bf20500
      
      Size/MD5 checksum:   321458 dfe120742481f5aaa35194ca1a535123
      
      Size/MD5 checksum:    77358 38387929149bdafbf8efb65d9a5fac93
      
      Size/MD5 checksum:    95180 55daccbd400db12616a8510d622f0464
      
      Size/MD5 checksum:    93044 2f73b824dbaeba31b5b172a355dfb4df
      
      Size/MD5 checksum:    75322 c4a009e7b70cd23f58f353243a09d347
      
      Size/MD5 checksum:    56256 87fef62f70ed46d10324af8a7c8a5fb7
      
      Size/MD5 checksum:   311038 91b2c593412da052a4fa09875db3c91f
      
      Size/MD5 checksum:   229056 ad336b4afc76066a0082e90a137c1cab
      
      Size/MD5 checksum:    33428 ade883eb6b82017de7a3b201ddda1598

  ARM architecture:

      
      Size/MD5 checksum:   192494 70f840aa837c8386f70f3ff246efe84c
      
      Size/MD5 checksum:   186452 2069050aca2de8f7576a9d7bbda63777
      
      Size/MD5 checksum:    79900 1da4b0ba58d4254820aa00887bf31c0c
      
      Size/MD5 checksum:    93332 1412562d076fb1ebc6c5a4c63bc2e31e
      
      Size/MD5 checksum:    41160 9edfb61c6f1fed525f84f0f85b4c62b7
      
      Size/MD5 checksum:    22618 5e4ffd3b36bf4251afe1ab1a2671012e
      
      Size/MD5 checksum:   187708 78bb72e367e36672138e4bf5ca5c3328
      
      Size/MD5 checksum:    95670 d79c68ed7ac714c9b9abe5949b163398
      
      Size/MD5 checksum:    69390 b86194768b7d6c5ddf212f0d621e6c3c
      
      Size/MD5 checksum:    46134 8d1494e42d524b1bd18f8f6b78e45af8
      
      Size/MD5 checksum:   252518 315afa7584e8a0b3e8a25bba677a899c
      
      Size/MD5 checksum:    68472 fa06c24c08d11f611ad9f27576f16dcc
      
      Size/MD5 checksum:    85132 4a097f581ef725dbda341d01eb1b8235
      
      Size/MD5 checksum:    90574 46900e4801ae9d2fdd6c2a071c851c87
      
      Size/MD5 checksum:    65880 2918c0bd1aaed58502b8da3d7da994c4
      
      Size/MD5 checksum:    48622 c362cbac44dfecd33505beeebef73098
      
      Size/MD5 checksum:   266058 2906d6357b1a9c59cf0046bf2d969655
      
      Size/MD5 checksum:   198540 188c9e74a16c33dc380137c4c1a15811
      
      Size/MD5 checksum:    27980 9ab9ea9d31aab790c0736d07a8b6b6d1

  Intel IA-32 architecture:

      
      Size/MD5 checksum:   184580 74c53a2c9f42165b6934b0e4d75780c0
      
      Size/MD5 checksum:   183344 0c718a5f12c363af57217b6782abfcc3
      
      Size/MD5 checksum:    81132 7eb90f081892fc85dde56c17e8a50b88
      
      Size/MD5 checksum:    92140 04557e8eebfbb9935708d6ffe6a0368a
      
      Size/MD5 checksum:    41252 529947515314222082c0bf1bdab2b4c6
      
      Size/MD5 checksum:    23372 557f4355bccee09274c044ceb9451199
      
      Size/MD5 checksum:   188464 547919bf5f8946256186d5292b3d6b09
      
      Size/MD5 checksum:    94072 75a05cedfca9b614ff5825011c0717ed
      
      Size/MD5 checksum:    69498 d2a074909549b0a5d1049a9d0fcba57d
      
      Size/MD5 checksum:    46232 5e74f16610bfa9e781539175e994b0a8
      
      Size/MD5 checksum:   247734 ce59732fe7c78843c52b25116d33a520
      
      Size/MD5 checksum:    69968 d743127ab00e9d53a831ff36194abe65
      
      Size/MD5 checksum:    84532 79c3ee6d36b442f4855213fe6304f7c4
      
      Size/MD5 checksum:    90262 59c35971572bd5f3efae61eed4045098
      
      Size/MD5 checksum:    66160 8c96b84cc87389a78f91b16e3c8ef369
      
      Size/MD5 checksum:    50288 d437480718dc4ae6eeddcee9f17a299f
      
      Size/MD5 checksum:   282850 cdd7a5403086b1be771a5ebc25c4a202
      
      Size/MD5 checksum:   199728 05502a82d04de1bd776362ec9bb31fc2
      
      Size/MD5 checksum:    28572 3a4579f571453e3cb6100abedc13db6f

  Intel IA-64 architecture:

      
      Size/MD5 checksum:   281016 03468195bb968fc3f0375d0cc9400071
      
      Size/MD5 checksum:   286342 161e62f98b5b22165a59617d22201dd5
      
      Size/MD5 checksum:   100086 1bd57edcb72df2c300c38f6987984f2f
      
      Size/MD5 checksum:   123896 d171a4f3f13539e67d643b29ada3cb4d
      
      Size/MD5 checksum:    52916 b2d9a3207a73614c02136fe4ab930435
      
      Size/MD5 checksum:    27476 2dc0138dadea50b173d8fa79a63ef14f
      
      Size/MD5 checksum:   263268 de86bfc3b9abb1cea336b5cbd040f486
      
      Size/MD5 checksum:   119434 9abf20890dd8b02309b2f5f804ad75ef
      
      Size/MD5 checksum:    89578 ed29251d6b00a977d5af82b5deed2cc7
      
      Size/MD5 checksum:    54536 a61c738926b52ecc220bbc51c54122ad
      
      Size/MD5 checksum:   425490 18c5974dac7de4aed3da5a9e8f011f94
      
      Size/MD5 checksum:    89536 9396e8524fbe4d8c048d7cbd31e02e49
      
      Size/MD5 checksum:   117580 928cd56da899b8ae3bbfd0f9110afcbd
      
      Size/MD5 checksum:    97556 fc73ba65380618a932aaf718902c308a
      
      Size/MD5 checksum:    86334 61478c7c721c0d46c8d19a34a3b88d09
      
      Size/MD5 checksum:    61890 bd34fd3266259f6b8fb2c4cfeba7d0db
      
      Size/MD5 checksum:   437890 90d0e3a82b8f32c4c7dc6945487c80b0
      
      Size/MD5 checksum:   254764 834020e75f268437203280f1672c2877
      
      Size/MD5 checksum:    37788 e215459da2c0efd8d1b368a6d863c080

  HP Precision architecture:

      
      Size/MD5 checksum:   220488 5f5d2a998b1c674742332ab485ebbb16
      
      Size/MD5 checksum:   221716 7883e4db6c82b98fae2f32c9c0b7d79f
      
      Size/MD5 checksum:    89888 aee7e24baaf5250e781206600d686b2e
      
      Size/MD5 checksum:   112590 1ec89c82e5daf2a1ce5ebdcc99788a32
      
      Size/MD5 checksum:    45366 866e7af5c4b3ae2cb98cd860bcb84cf6
      
      Size/MD5 checksum:    24952 f7728d4ae778004e4a402007f78d5f21
      
      Size/MD5 checksum:   224674 ab16cc0d9c2d8d1d5b7177b1cbf25fbd
      
      Size/MD5 checksum:   109212 5c373d837bd0c24c37c3160836a17648
      
      Size/MD5 checksum:    82272 70fd0e208c53b66f0bbdfcf8c745aadd
      
      Size/MD5 checksum:    49868 6d98152bad79cbdb5265897d7b61f45c
      
      Size/MD5 checksum:   298692 3e296ae82f6fe601fa96102a002569f5
      
      Size/MD5 checksum:    77978 7b818bd52335e755af1caf773e4ee5c6
      
      Size/MD5 checksum:    99698 ae90e7e4fd432d700270e9d483ba053f
      
      Size/MD5 checksum:    98124 2ba077c8e6e104a26d90eb9ecc0ef0c6
      
      Size/MD5 checksum:    76426 f43841a982fbb0009d1cd4c1ccc6f7bc
      
      Size/MD5 checksum:    55750 297b66fcfed039aa9769c3ae9f8c82ea
      
      Size/MD5 checksum:   318946 a8962e853f6a0bb198649a55f22f503d
      
      Size/MD5 checksum:   226294 aa9e5bde768f6a61fb57b5fb2361b627
      
      Size/MD5 checksum:    31396 22aa000e9337be0d28f661f07a772149

  Motorola 680x0 architecture:

      
      Size/MD5 checksum:   184470 4d670ef18f3383c9d56e3522d414953e
      
      Size/MD5 checksum:   178690 7b5dbe07ec8a33f0024b784d90a9633f
      
      Size/MD5 checksum:    82422 40469f494c03bd744002565d686f5c63
      
      Size/MD5 checksum:    93924 81a31fe6596c8a1d1f95c98063cb8ea2
      
      Size/MD5 checksum:    40786 598102f04b815330b9e5fef435f73613
      
      Size/MD5 checksum:    23652 219ef036ddf72a5a0586d775e39c6460
      
      Size/MD5 checksum:   191034 0031f30217d293082e4f47aa72ddc9de
      
      Size/MD5 checksum:    95584 3d55a481d517b90a069f310e08e51387
      
      Size/MD5 checksum:    70238 74101793a80c67b99dc0a6eafbe0461e
      
      Size/MD5 checksum:    46148 64be0a8549db8da33892ac5af1eb3c2d
      
      Size/MD5 checksum:   232308 dac954437576c2be6592833b184e8e8b
      
      Size/MD5 checksum:    70942 86a5489935ff3d6449e37cbe865efebb
      
      Size/MD5 checksum:    83990 b59787322dc26313ab31332179abc656
      
      Size/MD5 checksum:    89422 009e918ba4b449b7504db90f6dad4b73
      
      Size/MD5 checksum:    65800 b73fc81fa18f562aa23f09a3bfd2a1c5
      
      Size/MD5 checksum:    50618 b55189a19d1b2fcb1910bc3d2ee93a22
      
      Size/MD5 checksum:   245362 904d024b892b3129dc5b6ecc65795017
      
      Size/MD5 checksum:   197448 b0df4db4058260bcf1649bbaa09646b0
      
      Size/MD5 checksum:    28466 782342f95f11833c15b5a1f66c44e938

  Big endian MIPS architecture:

      
      Size/MD5 checksum:   176610 418c77d4d2ced577515b663db8b490bc
      
      Size/MD5 checksum:   200662 93978f1f6787dae48b4fda61c7d3dd2a
      
      Size/MD5 checksum:    85148 2cf3584459af7bff626ee3a46c9e22a1
      
      Size/MD5 checksum:    95620 c4b2daf89e9a3065894ff2b533fa9994
      
      Size/MD5 checksum:    40500 4323e6d4bd589adfb3f038d103e857b9
      
      Size/MD5 checksum:    23436 022dea6deddce0ea4ae66bde1608d324
      
      Size/MD5 checksum:   194732 a7ee47fa95e8efeed635276283380de6
      
      Size/MD5 checksum:    94508 697ccce902841a035931731a28cd3645
      
      Size/MD5 checksum:    68716 bfe2f78c0ac382dbb8878c7be3a1941c
      
      Size/MD5 checksum:    46054 b9151e195204f7de50d6a5418169543d
      
      Size/MD5 checksum:   283848 3e198f2cfafec73d4ff988eb6a50afff
      
      Size/MD5 checksum:    70360 626e62add269a04686127e0f7b5bccaa
      
      Size/MD5 checksum:    82424 3a1515fcf3445c15970c0fd07a49ef3b
      
      Size/MD5 checksum:    87628 70a125965dc2bf448e797082d668a701
      
      Size/MD5 checksum:    68892 53ffca2cd9bf48991c3c855def0d5ce0
      
      Size/MD5 checksum:    48556 62aec573cb89339328e7f9fc75b7e479
      
      Size/MD5 checksum:   281612 5ebf6fbbbb42bf1a72f76fa1bfede03a
      
      Size/MD5 checksum:   216648 ad8b2ff9175daa98eee4b7b1cb395cc2
      
      Size/MD5 checksum:    29918 89dca74d8822b94442969059468712f7

  Little endian MIPS architecture:

      
      Size/MD5 checksum:   174666 d170ffa9d18c62240ce4798c0dada783
      
      Size/MD5 checksum:   198994 2df8272f060b09bbcfe88cda90b2ed87
      
      Size/MD5 checksum:    84444 cd672d7479d048d61a90ec2500832a64
      
      Size/MD5 checksum:    94288 07da9d6f85e470da4b336ea1354c97e7
      
      Size/MD5 checksum:    40310 093614bcbdb0088121426cb846cff3ee
      
      Size/MD5 checksum:    23380 18826cce30813b911f3b9c4d46e5a535
      
      Size/MD5 checksum:   191342 0604e3ca76849c58c07ca578b425ca31
      
      Size/MD5 checksum:    93548 d2f0476d483cd7587bdc46dcf29a6f78
      
      Size/MD5 checksum:    67974 1742d8c432da9dbe7f77a779d57fabe4
      
      Size/MD5 checksum:    45832 1e54e5c7ef18f99452d8cbf3de1321ee
      
      Size/MD5 checksum:   280886 e8850cb7612e4f308ceb1c881401e3c8
      
      Size/MD5 checksum:    69638 1082a2a8b66dfe79dffeb58e0d4c71e8
      
      Size/MD5 checksum:    81898 d3278feacace408f73c0d4cb02236810
      
      Size/MD5 checksum:    87496 7018c5b8b269b456543ea5e803bde5b5
      
      Size/MD5 checksum:    68286 ea011ec841114e5011af11b4bd9782fb
      
      Size/MD5 checksum:    48274 e099d7e3236da4299a46eb33ce9b5ff1
      
      Size/MD5 checksum:   278004 2bcb5abc5d4fad4df354a6cb67a8c4e1
      
      Size/MD5 checksum:   215406 ec6118af3a46e21c5f906805d3ed02ab
      
      Size/MD5 checksum:    29692 23f1c90c8a8f515e299439b31d3fc616

  PowerPC architecture:

      
      Size/MD5 checksum:   194010 70317ef75f1ff878e03358f30241b50a
      
      Size/MD5 checksum:   184370 f074fb9f5264e0f143f1b7bfec2a257d
      
      Size/MD5 checksum:    79046 d9614904a1f840681dc93fb78366576a
      
      Size/MD5 checksum:    97844 1d024687cf85f3bc839eba98e5fe78f1
      
      Size/MD5 checksum:    38968 985e2a94980dd34944a90400d559be5f
      
      Size/MD5 checksum:    22480 f77a4bf38923c9444b9c94d24eff1093
      
      Size/MD5 checksum:   186714 3ab055175b014da738555891ec06b4bd
      
      Size/MD5 checksum:    95940 077e7069001f2aa3bb6891bd165517ac
      
      Size/MD5 checksum:    69536 25b7695da0a416f8e17a61eefec8166b
      
      Size/MD5 checksum:    45318 ea12e6bb94d195842350d884f47a8559
      
      Size/MD5 checksum:   255242 24ad35efce900109c7e413911c62c0ae
      
      Size/MD5 checksum:    67580 4b8c91919a50b473c2469ca98e0fc33a
      
      Size/MD5 checksum:    84610 f23a35b01ae4d4af125f315a8446aca1
      
      Size/MD5 checksum:    89014 76ed7eba56d3f226f5a2418fc17e1ffa
      
      Size/MD5 checksum:    65688 d51186a196ec343f86e541156add0322
      
      Size/MD5 checksum:    47530 c29f8e2a445b075c41b31f118ae59e3b
      
      Size/MD5 checksum:   276322 9dae15b935e57cf185b968a6f578668f
      
      Size/MD5 checksum:   199040 b441149703b506a36962cb7ca129540d
      
      Size/MD5 checksum:    27316 1eea4446cf3a97f78f6fa402b483e649

  IBM S/390 architecture:

      
      Size/MD5 checksum:   194762 1435cfb4610d31b36394530ea4649b83
      
      Size/MD5 checksum:   183750 081990697c7433d650b894810b7d139b
      
      Size/MD5 checksum:    85430 bc9b4348004093728dc0e234136868f2
      
      Size/MD5 checksum:    96396 b013b903b3598303c443caf748c753c2
      
      Size/MD5 checksum:    43670 888d10198a792eccdbc7f6ca7ab251b8
      
      Size/MD5 checksum:    24234 06b970afb124cc6dde7ce24a4919bb58
      
      Size/MD5 checksum:   199804 e0068ff3da3804c569d642811de95237
      
      Size/MD5 checksum:    99428 dbd979448dc6c055cb404d32fd304b0f
      
      Size/MD5 checksum:    72506 30809f73a1cb0730b7058ecdb20f5574
      
      Size/MD5 checksum:    47180 557cecb246835e9cb7cb8021b5c5eb8a
      
      Size/MD5 checksum:   256026 a53765a4d0fa77b3d86e646be870bda8
      
      Size/MD5 checksum:    73750 a3c1de7d6ac9b5c629d7fb4e53b60cc6
      
      Size/MD5 checksum:    86444 7102fe745578d64b53418ae107046e75
      
      Size/MD5 checksum:    89976 14147458752228a894e6e64023b33989
      
      Size/MD5 checksum:    67706 138f7010dc7e8c6a5ed1e6edf1206a64
      
      Size/MD5 checksum:    51802 2d5b1c5d8c53b6aeaf626b4b3e72187f
      
      Size/MD5 checksum:   268084 10f0bb9c814049f435468e467ef94046
      
      Size/MD5 checksum:   204966 ea8f0ffee1f67c52518a262965c69502
      
      Size/MD5 checksum:    30368 f39fdd6ada53e0971a497d50cae76a00

  Sun Sparc architecture:

      
      Size/MD5 checksum:   193956 4f418aede13f270b60cc94705f07d6fd
      
      Size/MD5 checksum:   185780 4aaf8924782510a9f91ebfd830c8853a
      
      Size/MD5 checksum:    82090 3b9a8ce60940eeecdf97ea5ad60d7af7
      
      Size/MD5 checksum:   100550 4aa262493ff39caa219221bc056856f6
      
      Size/MD5 checksum:    41276 516ac8e930700aefb590339f825260ca
      
      Size/MD5 checksum:    23372 3b0d052149a3c43efabe0b6b7215ba45
      
      Size/MD5 checksum:   192290 2c86d26f4bdec588a34cbfb378ab0c7f
      
      Size/MD5 checksum:    97420 c8d00bfa4a97aba714007f873e1a6782
      
      Size/MD5 checksum:    70752 6dd48bc623e398c29361098fc149fff2
      
      Size/MD5 checksum:    46434 9506f3f6ad6c5b61c8b498c570105904
      
      Size/MD5 checksum:   253058 f50644e4404faeee058a5d81daa4de9a
      
      Size/MD5 checksum:    69928 6d99590b181cb8468f66c99ad4a16cdc
      
      Size/MD5 checksum:    85426 b0e98179f2cccb15d3557f1be0007cb4
      
      Size/MD5 checksum:    90272 dbfa53d1e72dc766faeca427cd70dfd6
      
      Size/MD5 checksum:    66138 f623a7c2bc4cd58218824b8a036b5762
      
      Size/MD5 checksum:    49990 823194f98651bf255fc476af8067d37a
      
      Size/MD5 checksum:   277384 0de5a54da724352eb7d5f74ac7e4ee42
      
      Size/MD5 checksum:   200038 d53b8874d4565315ebc27805f932b0f2
      
      Size/MD5 checksum:    29122 758ac4f708645e97bb81223045b9f3df


  These files will be moved into the stable distribution after new KDE
  packages have been uploaded into unstable (sid) and compiled for
  all architectures.

---------------------------------------------------------------------------------
For apt-get: deb  Debian -- Security Information  stable/updates main
For dpkg-ftp:    dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and  http://packages.debian.org/