Upstream information

CVE-2011-3365 at MITRE

Description

The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:P/A:N
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
SUSE Bugzilla entry: 721974 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 11.4
  • kdelibs4 >= 4.6.0-6.17.1
  • kdelibs4-branding-upstream >= 4.6.0-6.17.1
  • kdelibs4-core >= 4.6.0-6.17.1
  • kdelibs4-doc >= 4.6.0-6.17.1
  • libkde4 >= 4.6.0-6.17.1
  • libkde4-32bit >= 4.6.0-6.17.1
  • libkde4-devel >= 4.6.0-6.17.1
  • libkdecore4 >= 4.6.0-6.17.1
  • libkdecore4-32bit >= 4.6.0-6.17.1
  • libkdecore4-devel >= 4.6.0-6.17.1
  • libksuseinstall-devel >= 4.6.0-6.17.1
  • libksuseinstall1 >= 4.6.0-6.17.1
  • libksuseinstall1-32bit >= 4.6.0-6.17.1
openSUSE 11.4
  • kdelibs4 >= 4.6.0-6.17.1
  • kdelibs4-branding-upstream >= 4.6.0-6.17.1
  • kdelibs4-core >= 4.6.0-6.17.1
  • kdelibs4-core-debuginfo >= 4.6.0-6.17.1
  • kdelibs4-debuginfo >= 4.6.0-6.17.1
  • kdelibs4-debugsource >= 4.6.0-6.17.1
  • kdelibs4-doc >= 4.6.0-6.17.1
  • kdelibs4-doc-debuginfo >= 4.6.0-6.17.1
  • libkde4 >= 4.6.0-6.17.1
  • libkde4-32bit >= 4.6.0-6.17.1
  • libkde4-debuginfo >= 4.6.0-6.17.1
  • libkde4-debuginfo-32bit >= 4.6.0-6.17.1
  • libkde4-devel >= 4.6.0-6.17.1
  • libkdecore4 >= 4.6.0-6.17.1
  • libkdecore4-32bit >= 4.6.0-6.17.1
  • libkdecore4-debuginfo >= 4.6.0-6.17.1
  • libkdecore4-debuginfo-32bit >= 4.6.0-6.17.1
  • libkdecore4-devel >= 4.6.0-6.17.1
  • libkdecore4-devel-debuginfo >= 4.6.0-6.17.1
  • libksuseinstall-devel >= 4.6.0-6.17.1
  • libksuseinstall1 >= 4.6.0-6.17.1
  • libksuseinstall1-32bit >= 4.6.0-6.17.1
  • libksuseinstall1-debuginfo >= 4.6.0-6.17.1
  • libksuseinstall1-debuginfo-32bit >= 4.6.0-6.17.1
Patchnames:
kdelibs4
openSUSE Tumbleweed
  • kdelibs3 >= 3.5.10-89.3
  • kdelibs3-32bit >= 3.5.10-89.3
  • kdelibs3-arts >= 3.5.10-89.3
  • kdelibs3-arts-32bit >= 3.5.10-89.3
  • kdelibs3-default-style >= 3.5.10-89.3
  • kdelibs3-default-style-32bit >= 3.5.10-89.3
  • kdelibs3-devel >= 3.5.10-89.3
  • kdelibs3-doc >= 3.5.10-89.3
Patchnames:
openSUSE Tumbleweed GA kdelibs3