- --------------------------------------------------------------------------
Debian Security Advisory DSA 237-1                     security@debian.org 
Debian -- Security Information                              Martin Schulze
January 22nd, 2003                       Debian -- Debian security FAQ 
- --------------------------------------------------------------------------

Package        : kdenetwork
Vulnerability  : several
Problem-type   : local, remote
Debian-specific: no
CVE Id         : CAN-2002-1393

The KDE team discovered several vulnerabilities in the K Desktop
Environment.  In some instances KDE fails to properly quote parametersof instructions passed to a command shell for execution.  These
parameters may incorporate data such as URLs, filenames and e-mail
addresses, and this data may be provided remotely to a victim in an
e-mail, a webpage or files on a network filesystem or other untrusted
source.

By carefully crafting such data an attacker might be able to execute
arbitary commands on a vulnerable sytem using the victim's account and
privileges.  The KDE Project is not aware of any existing exploits of
these vulnerabilities.  The patches also provide better safe guards
and check data from untrusted sources more strictly in multiple
places.

For the current stable distribution (woody), these problems have been fixed
in version 2.2.2-14.6.

The old stable distribution (potato) does not contain KDE packages.

For the unstable distribution (sid), these problems will most probably
not be fixed but new packages for KDE 3.1 for sid are expected for
this year.

We recommend that you upgrade your KDE packages.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

      
      Size/MD5 checksum:      902 7d838dc381bb2ae2bd97f8942c4f4df4
      
      Size/MD5 checksum:    29614 54ba6afd41239d88c8978dad67824418
      
      Size/MD5 checksum:  3319181 25fbfc5d2592937480c0d3796a2416e0

  Alpha architecture:

      
      Size/MD5 checksum:   231836 a73a1c7184121b4b47deb784ea511275
      
      Size/MD5 checksum:   154678 6d1bcf5f5f2764c6f0ac09574bae0d47
      
      Size/MD5 checksum:   189188 c4e540b2a1e7cf55d529ce64752eebe9
      
      Size/MD5 checksum:   999084 05c2c7dd98f3f345ac049fe7a9872585
      
      Size/MD5 checksum:   439708 4a1583e539d407e9eab478ef0337519b
      
      Size/MD5 checksum:  1287668 71e5ebd2c056767e8f77dff9cee9bf5f
      
      Size/MD5 checksum:    98800 3ae8cc2a578439949a56c4e166536484
      
      Size/MD5 checksum:   573246 bda921e4dd5e40074bc6609dd6277fd4
      
      Size/MD5 checksum:   616142 731fe0a8aaef46ce3e5658a9ff96ce7f
      
      Size/MD5 checksum:   132618 adbd43f6d1e0a262ae5d61e5292f5d5b
      
      Size/MD5 checksum:   157132 e81bd1379fb9f174b69ea5dc31512600
      
      Size/MD5 checksum:    61900 e97ac304b22480308e7ead1c7c1da156
      
      Size/MD5 checksum:   100888 d1dbf97bdb8697c2c5cf1affa611072a

  ARM architecture:

      
      Size/MD5 checksum:   212900 f4dbecadcddffce7adea7e967a0c0c35
      
      Size/MD5 checksum:   133916 ffd17d38112d9743b14182d327ad0b04
      
      Size/MD5 checksum:   156042 79f9cbf33c510f73f47ceba2a29c2232
      
      Size/MD5 checksum:   877500 79a4c589e60ad1b5e642850ca82cae02
      
      Size/MD5 checksum:   396208 76fb7b77c751bf92288e215a96466265
      
      Size/MD5 checksum:  1124434 2e5337855dd0f9c4333a0325a13ca9d8
      
      Size/MD5 checksum:    76358 66f85cb5ff2a450da3ab675844e82640
      
      Size/MD5 checksum:   510578 b42314870f6c5657abab6aa799401ff6
      
      Size/MD5 checksum:   565010 fab01c101f1626415ed0ab4322c7b231
      
      Size/MD5 checksum:   114330 8a0d158c621db04df3487d15dcd73251
      
      Size/MD5 checksum:   138076 845ab476ff87e5d2995b7bca72b65658
      
      Size/MD5 checksum:    61922 38eb47003ba805faf4f14cfbc4413268
      
      Size/MD5 checksum:    83878 3c5d8b090d4ad557f0faa96acba9a596

  Intel IA-32 architecture:

      
      Size/MD5 checksum:   216184 e0ba0895cd7c5dedc7714e8be24a3902
      
      Size/MD5 checksum:   131494 8867738970c584599c6e0137624ba84b
      
      Size/MD5 checksum:   150478 085dae348c374ea8b829004cebaa8177
      
      Size/MD5 checksum:   853876 de6f4270cb6fbdff12814557a515bb47
      
      Size/MD5 checksum:   398380 a6173c81fce4a00900357ab4b18a7efd
      
      Size/MD5 checksum:  1119206 18760a35b1c3af5580987df061e2d2ed
      
      Size/MD5 checksum:    75516 adc4aca5134a83e26baf513b89b10939
      
      Size/MD5 checksum:   505078 0645c73bc864fd14dc7b54a1b10be52d
      
      Size/MD5 checksum:   523192 50177531b5f4e4f219e3012ec14b79a3
      
      Size/MD5 checksum:   113834 9d2338b3588f78d63eedb1435497648e
      
      Size/MD5 checksum:   132142 1931f6150ff10c8f930b51ed590c1aad
      
      Size/MD5 checksum:    61914 bc839140abfef89a69c785babf2e9243
      
      Size/MD5 checksum:    84324 4a0f4017e94cdfc2882b054967b132c9

  Intel IA-64 architecture:

      
      Size/MD5 checksum:   271436 154bf262425f346f89ddf0f6b5e68ae0
      
      Size/MD5 checksum:   195224 6027bf7bde4679bd39731fc03dc5840b
      
      Size/MD5 checksum:   211256 337ffb8ee94a0120aa79e04793d60550
      
      Size/MD5 checksum:  1312694 370ed0bfedd91d1504705e63adbba39b
      
      Size/MD5 checksum:   522170 340e62c9153b96d43dc3120e8108ba65
      
      Size/MD5 checksum:  1361216 3cbb1631d19c17425a55343fd1b143a9
      
      Size/MD5 checksum:   113906 617759b293daf39b1da6c81963c080b1
      
      Size/MD5 checksum:   640924 cdc00182929c61f7a7bcfb95e38381be
      
      Size/MD5 checksum:   616218 03e2cc4c483d74918a6183a5c0b7d0ea
      
      Size/MD5 checksum:   145472 b46e9f24efe3a272480a2b5813c9417a
      
      Size/MD5 checksum:   207342 a17a1026f2ef3ac17b34d629bce5d5e0
      
      Size/MD5 checksum:    61906 7445697381854726a4a5deca6e11694a
      
      Size/MD5 checksum:   121690 b50ef8326affc8f06bc80d09a2f12479

  HP Precision architecture:

      
      Size/MD5 checksum:   244328 2742d6a243163c2dfb9a066b78a234f4
      
      Size/MD5 checksum:   152326 fe5fb44e6d6801d7ceea7f2099b53fdd
      
      Size/MD5 checksum:   218234 7fe86ba9493e91d9e4bdb2865d4d817b
      
      Size/MD5 checksum:   978146 51bc19df2de13dac1a350ca74478dced
      
      Size/MD5 checksum:   443984 77efe55fd7033c5837273836d2a8430b
      
      Size/MD5 checksum:  1253340 34af3fb4dc920c1063aa0e76106f0fb1
      
      Size/MD5 checksum:    93262 b67c9cecd6279bc53ab8bbc38b5c1b17
      
      Size/MD5 checksum:   560932 29723fcef4e7d866c61e86665aa04602
      
      Size/MD5 checksum:   581774 824394310517e3ea4101a8bd1f605f68
      
      Size/MD5 checksum:   137054 62f842326e82d6c082da1d44cf20ff06
      
      Size/MD5 checksum:   169018 f04311de6903ebf1513c447e6fc6768b
      
      Size/MD5 checksum:    61900 3cbf264fb46de4b5aa754b7980a67f24
      
      Size/MD5 checksum:   116502 e2bd2cdfd9bf48c7b7cff3fb3ae9c494

  Motorola 680x0 architecture:

      
      Size/MD5 checksum:   212306 cac8103fc062baa8ac66cf16f6ad5633
      
      Size/MD5 checksum:   126056 8f05de74c39544e3a6ba9b11a2d6947d
      
      Size/MD5 checksum:   141672 34b54431fb1b2eb46c72241c0939649c
      
      Size/MD5 checksum:   813402 c899eb8d2226f1823f9712956e03dc4d
      
      Size/MD5 checksum:   392440 dc71c18befebd9248fad0bb988787796
      
      Size/MD5 checksum:  1096866 9e485a248df221d198cb83d1ec4e591d
      
      Size/MD5 checksum:    75488 9f3f8f69ef177deead6237aa02116121
      
      Size/MD5 checksum:   498576 41a9f4362222dba010181704cd7abd8a
      
      Size/MD5 checksum:   552844 052206cccf78c81830bc6ea2c7d5fe63
      
      Size/MD5 checksum:   113064 e72618cbf8f2bb6b2ef4d6313891a4fc
      
      Size/MD5 checksum:   129254 5f57c83aef6db5298cd829b7f6a7c7c4
      
      Size/MD5 checksum:    61932 fb75ab48b23df01a25481463b6277525
      
      Size/MD5 checksum:    83050 b1a994af0db825c734cbb3269c6e2b10

  Big endian MIPS architecture:

      
      Size/MD5 checksum:   214370 346cf16ef281264d774f50d69aee1bd8
      
      Size/MD5 checksum:   138416 60d255917b415b77710e8a7a9973789a
      
      Size/MD5 checksum:   143674 6af7e2daa34f8bfc0d8662898c7ed4c8
      
      Size/MD5 checksum:   913566 a19bfb980f81a0586dfcc9b942658ba6
      
      Size/MD5 checksum:   371450 2b91d22b3632e3e62707bb032dd1d14e
      
      Size/MD5 checksum:  1144668 5918ec223409c7ee3f6e0b4ff937b536
      
      Size/MD5 checksum:    89322 ee44fb7e9a49645184c582e387570f3c
      
      Size/MD5 checksum:   538724 7e6de824a9400cc0630fbe373d210933
      
      Size/MD5 checksum:   479006 e2088e8c8baffc0bfeb6e5434cdd3809
      
      Size/MD5 checksum:   116842 9a50bce76e75dd9594668dfc9fd2a33f
      
      Size/MD5 checksum:   125614 4e49f71e8ed43e023e6d96c1fdd68352
      
      Size/MD5 checksum:    61916 aaff2df593e6bf7e197a4d1edad04feb
      
      Size/MD5 checksum:    85964 7b380e1ce457bb10976b04c00f43d1c6

  Little endian MIPS architecture:

      
      Size/MD5 checksum:   212518 49824bc93c95c622e362780633f4c324
      
      Size/MD5 checksum:   136960 51c4e76b0a3c3914d1901cca1d9e4c78
      
      Size/MD5 checksum:   143672 8a1df98403b7149b3bf1be85f2f330b5
      
      Size/MD5 checksum:   904380 24296745042511ceffec38c631ab7dde
      
      Size/MD5 checksum:   367604 f246b1425437262867e3ff7da42ed51a
      
      Size/MD5 checksum:  1137392 0f3b541ca9bcd4655fbf9e7342d25e8d
      
      Size/MD5 checksum:    88406 2a5df0cf9fdfcea63f10c631dd53716d
      
      Size/MD5 checksum:   536278 fe253aef2990895a037f235097dd72ec
      
      Size/MD5 checksum:   457184 f78f2099fb30b7808ea66434446a2884
      
      Size/MD5 checksum:   117290 5a02888180cc2855f7ef81e85f00eebf
      
      Size/MD5 checksum:   124236 c1938f130add8c44ab38c326e6c534e6
      
      Size/MD5 checksum:    61902 0762e12b17fb629f132b2454d864c53b
      
      Size/MD5 checksum:    85692 9feed258211d74d31ee311565251c979

  PowerPC architecture:

      
      Size/MD5 checksum:   211438 907af6a353d97aee9fa1aaf28cacda3a
      
      Size/MD5 checksum:   131064 f56cb6818afa9d72f445830acd7292fa
      
      Size/MD5 checksum:   151886 6a053393575a454f038185b756a0abcb
      
      Size/MD5 checksum:   873358 6353c681acb85c1e2c036070189a20cb
      
      Size/MD5 checksum:   393652 3758bd4689c51ca95187c454d6cdb669
      
      Size/MD5 checksum:  1130932 dedcd1a94158e8a83634db058fce0cc9
      
      Size/MD5 checksum:    74434 1dd9cc41f9f330c0ee7d43eabe463691
      
      Size/MD5 checksum:   506572 ebb4d4a173892a554b08fcbbfa6d7a47
      
      Size/MD5 checksum:   560830 8377840c00938fb08e668e6d5133e021
      
      Size/MD5 checksum:   113496 e9007b7aeeacd7b79b96a207996994d7
      
      Size/MD5 checksum:   137836 20f6762dddf846a06c88aea8a9ee5748
      
      Size/MD5 checksum:    61904 40343628ec6b3bffc8488a9fab22aa9d
      
      Size/MD5 checksum:    86910 07cc717209d374e40471516f87cb0b57

  IBM S/390 architecture:

      
      Size/MD5 checksum:   226964 f92c1fd9cbf830102ee6d36740294476
      
      Size/MD5 checksum:   133072 709bf0d095d5545cad07b510aa6d9b07
      
      Size/MD5 checksum:   147042 3b1d10fd8eddde2ce906405456802aa4
      
      Size/MD5 checksum:   852926 67238ef8e9cf823bfb9c20e9eefc06d1
      
      Size/MD5 checksum:   396676 11bd687afbb67950d8e887e4647de4f2
      
      Size/MD5 checksum:  1144594 134bdce931f7fb58b5f88a7291946080
      
      Size/MD5 checksum:    78694 207ccab147bbc66a5e36335454af504d
      
      Size/MD5 checksum:   511258 e82ce22dfef75cf3f482dc38321d5186
      
      Size/MD5 checksum:   543418 f9a5c46bfebf028c6af911192f342212
      
      Size/MD5 checksum:   118038 af8fde5de5acf89497aa437ab97c8c00
      
      Size/MD5 checksum:   141380 4e17f6758167e34bfed6fd817c8fa147
      
      Size/MD5 checksum:    61898 e536690ab66cf7ded30487145bdd10c3
      
      Size/MD5 checksum:    87666 9196a15126020e61144b3db4beddc756

  Sun Sparc architecture:

      
      Size/MD5 checksum:   219960 689efc429f64f182a4ed5c272f6e0009
      
      Size/MD5 checksum:   134240 95e4909dcfd383247f10d3e720bc7274
      
      Size/MD5 checksum:   151758 ab75a1798dccdee5f529c529a05b0e6f
      
      Size/MD5 checksum:   865630 68b7239deed831f96c93e3eb100505f4
      
      Size/MD5 checksum:   399598 78904b4ebe7961fe8b9f24315b2ae256
      
      Size/MD5 checksum:  1143706 596c1e4691b07789777e8ab825fc3fa0
      
      Size/MD5 checksum:    76430 cc2479f281d9eb1ca0e40e406c641447
      
      Size/MD5 checksum:   508160 f8c4dcce194273e3cd73e50036a1ce23
      
      Size/MD5 checksum:   527222 3e9a7a5697b57d2dd20465af95e82a08
      
      Size/MD5 checksum:   119832 4801db0724ef320781099388ca580ef7
      
      Size/MD5 checksum:   136430 766feb0dea63d719f4fd8521ebf38d33
      
      Size/MD5 checksum:    61910 930618a4a494d8413a59bc6c4a544fe3
      
      Size/MD5 checksum:    84570 8911783af202480210518a48e29c435a


  These files will probably be moved into the stable distribution on
  its next revision.

- ---------------------------------------------------------------------------------
For apt-get: deb  Debian -- Security Information  stable/updates main
For dpkg-ftp:    dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and  http://packages.debian.org/