New kdelibs and kdebase packages are available for Slackware 9.1, 10.0, and -current to fix security issues.

发现有一些错误会以相同方式影响许多 Web 浏览器。Secunia 公告报告：

问题在于浏览器不会检查目标框架是否属于具有恶意链接的网站，因此无法防止浏览器窗口在另一个窗口中加载使用指定框架的内容。

若成功利用此漏洞，将允许恶意网站在如受信任网站所拥有的另一个浏览器窗口中，加载使用任意框架的任意
内容。

KDE 安全公告报告：

恶意网站可滥用 Konqueror 并将其拥有的框架插入其他受信任网站的页面。因此，用户可能无意中将原本预期给受信任网站使用的机密信息发送到恶意网站。

Secunia 已在下列网址提供漏洞演示：http://secunia.com/multiple_browsers_frame_injection_vulnerability_tes t/。

發現有一些錯誤會以相同方式影響許多網頁瀏覽器。Secunia 公告報告：

問題在於瀏覽器不會檢查目標框架是否屬於具有惡意連結的網站，因此無法防止瀏覽器視窗在另一個視窗中載入使用具名框架的內容。

若成功惡意利用此弱點，將允許惡意網站在如受信任網站所擁有的另一個視窗中，載入使用任意框架的任意
內容。

KDE 安全性公告報告：

惡意網站可濫用 Konqueror 並將其擁有的框架插入其他受信任網站的頁面。因此，使用者可能在不知情的情況下，將原本預定給受信任網站使用的機密資訊傳送到惡意網站。

Secunia 已在下列網址提供弱點示範 http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/。

同じ仕組みで多くの Web ブラウザに影響を与えているバグのクラスが発見されました。Secunia アドバイザリによる報告：

ここで問題となるのは、ターゲットフレームが、悪意のあるリンクを含む Web サイトに属しているかどうかを、ブラウザが確認しないことにあります。そのため、ブラウザウインドウが、別のウインドウで named フレームのコンテンツを読み込むことを阻止できません。

悪用に成功すると、悪意のある Web サイトが、例えば信頼できるサイトが所有する、
別のブラウザウインドウの任意のフレームで任意のコンテンツをロードすることができます。

KDE セキュリティアドバイザリによる報告：

悪意のある Web サイトが、Konqueror を不正利用して、独自のフレームを別の信頼できる web サイトのページに挿入する可能性があります。その結果、ユーザーが知らずに、信頼できる Web サイトに送信することが意図された機密情報を悪意のある web サイトに送信する可能性があります。

Secunia は、次の URL で脆弱性のデモンストレーションを提供しています：http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/

A class of bugs affecting many web browsers in the same way was discovered. A Secunia advisory reports :

The problem is that the browsers don't check if a target frame belongs to a website containing a malicious link, which therefore doesn't prevent one browser window from loading content in a named frame in another window.

Successful exploitation allows a malicious website to load arbitrary content in an arbitrary frame in another browser window owned by e.g.
a trusted site.

A KDE Security Advisory reports :

A malicious website could abuse Konqueror to insert its own frames into the page of an otherwise trusted website. As a result the user may unknowingly send confidential information intended for the trusted website to the malicious website.

Secunia has provided a demonstration of the vulnerability at http://secunia.com/multiple_browsers_frame_injection_vulnerability_tes t/.

A number of vulnerabilities were discovered in KDE that are corrected with these update packages.

The integrity of symlinks used by KDE are not ensured and as a result can be abused by local attackers to create or truncate arbitrary files or to prevent KDE applications from functioning correctly (CVE-2004-0689).

The DCOPServer creates temporary files in an insecure manner. These temporary files are used for authentication-related purposes, so this could potentially allow a local attacker to compromise the account of any user running a KDE application (CVE-2004-0690). Note that only KDE 3.2.x is affected by this vulnerability.

The Konqueror web browser allows websites to load web pages into a frame of any other frame-based web page that the user may have open.
This could potentially allow a malicious website to make Konqueror insert its own frames into the page of an otherwise trusted website (CVE-2004-0721).

The Konqueror web browser also allows websites to set cookies for certain country-specific top-level domains. This can be done to make Konqueror send the cookies to all other web sites operating under the same domain, which can be abused to become part of a session fixation attack. All country-specific secondary top-level domains that use more than 2 characters in the secondary part of the domain name, and that use a secondary part other than com, net, mil, org, gove, edu, or int are affected (CVE-2004-0746).

Daniel Fabian discovered a potential privacy issue in KDE. When creating a link to a remote file from various applications, including Konqueror, the resulting URL may contain the authentication credentials used to access that remote resource. This includes, but is not limited to, browsing SMB (Samba) shares. Upon further investigation, it was found that the SMB protocol handler also unnecessarily exposed authentication credentials (CVE-2004-1171).

Another vulnerability was discovered where a malicious website could abuse Konqueror to load its own content into a window or tab that was opened by a trusted website, or it could trick a trusted website into loading content into an existing window or tab. This could lead to the user being confused as to the origin of a particular webpage and could have the user unknowingly send confidential information intended for a trusted site to the malicious site (CVE-2004-1158).

The updated packages contain a patch from the KDE team to solve this issue.

Additionally, the kdelibs and kdebase packages for Mandrakelinux 10.1 contain numerous bugfixes. New qt3 packages are being provided for Mandrakelinux 10.0 that are required to build the kdebase package.

Updated kdelib and kdebase packages that resolve multiple security issues are now available.

The kdelibs packages include libraries for the K Desktop Environment.
The kdebase packages include core applications for the K Desktop Environment.

Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks.
The Common Vulnerabilities and Exposures project has assigned the name CVE-2004-0689 to this issue.

WESTPOINT internet reconnaissance services has discovered that the KDE web browser Konqueror allows websites to set cookies for certain country specific secondary top level domains. An attacker within one of the affected domains could construct a cookie which would be sent to all other websites within the domain leading to a session fixation attack. This issue does not affect popular domains such as .co.uk, .co.in, or .com. The Common Vulnerabilities and Exposures project has assigned the name CVE-2004-0721 to this issue.

A frame injection spoofing vulnerability has been discovered in the Konqueror web browser. This issue could allow a malicious website to show arbitrary content in a named frame of a different browser window.
The Common Vulnerabilities and Exposures project has assigned the name CVE-2004-0746 to this issue.

All users of KDE are advised to upgrade to these erratum packages, which contain backported patches from the KDE team for these issues.

The remote host is using a version of Mozilla that is vulnerable to cross-domain frame loading. It may allow an attacker to spoof the interface of a trusted web site. To exploit this vulnerability a victim will need to visit a web site operated by an attacker.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
18782	Slackware 10.0 / 9.1 / current : kde (SSA:2004-247-01)	Nessus	Slackware Local Security Checks	2005/7/13	2021/1/14	high
56476	FreeBSD：多个浏览器框架注入漏洞 (641859e8-eca1-11d8-b913-000c41e2cdad)	Nessus	FreeBSD Local Security Checks	2011/10/13	2021/1/6	high
56476	FreeBSD：多個瀏覽器框架插入弱點 (641859e8-eca1-11d8-b913-000c41e2cdad)	Nessus	FreeBSD Local Security Checks	2011/10/13	2021/1/6	high
56476	FreeBSD：複数のブラウザフレーム注入の脆弱性（641859e8-eca1-11d8-b913-000c41e2cdad）	Nessus	FreeBSD Local Security Checks	2011/10/13	2021/1/6	high
56476	FreeBSD : Mutiple browser frame injection vulnerability (641859e8-eca1-11d8-b913-000c41e2cdad)	Nessus	FreeBSD Local Security Checks	2011/10/13	2021/1/6	high
14335	Mandrake Linux Security Advisory : kdelibs/kdebase (MDKSA-2004:086)	Nessus	Mandriva Local Security Checks	2004/8/22	2021/1/6	high
15981	Mandrake Linux Security Advisory : kdelibs (MDKSA-2004:150)	Nessus	Mandriva Local Security Checks	2004/12/15	2021/1/6	high
15427	RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)	Nessus	Red Hat Local Security Checks	2004/10/6	2021/1/14	high
1772	Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)	Nessus Network Monitor	Web Clients	2004/8/20	2019/3/6	high
801228	Mozilla < 1.7.1 Cross-Domain Frame Loading Vulnerability	Log Correlation Engine	Web Clients			medium

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

medium