Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Gentoo: 200305-03 Critical Advisory for Kopete Remote Exploit

gentoo
Calendar Grey May 14, 2003
Dist Gentoo Esm H88
Hackers could exploit a flaw in the messaging software kopete, potentially leading to code execution. To mitigate possible risks, ensure you upgrade to version 0.6.2.
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.

Summary


GENTOO LINUX SECURITY ANNOUNCEMENT 200305-03


The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the 
command line when executing gpg, which allows remote attackers to 
execute arbitrary commands.

SOLUTION

It is recommended that all Gentoo Linux users who are running
net-im/kopete upgrade to kopete-0.6.2 as follows:

emerge sync
emerge kopete
emerge clean

aliz@gentoo.org - GnuPG key is available at

Topics%20covered

Topics Covered

security advisory gentoo remote exploit critical command execution upgrade recommendation kopete

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : kopete
SUMMARY : Unsafe command line cleansing
DATE : 2003-05-14 07:39 UTC
EXPLOIT : remote
VERSIONS AFFECTED : =kopete-0.6.2
CVE : CAN-2003-0256

Topics%20covered

Topics Covered

security advisory gentoo remote exploit critical command execution upgrade recommendation kopete

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here