Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200504-23] Kommander: Insecure remote script execution Vulnerability Scan
Vulnerability Scan Summary
Kommander: Insecure remote script execution
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200504-23
(Kommander: Insecure remote script execution)
Kommander executes data files from possibly untrusted locations without
A possible hacker could exploit this to execute arbitrary code with the
permissions of the user running Kommander.
There is no known workaround at this time.
All kdewebdev users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=kde-base/kdewebdev-3.3.2-r2"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.