Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Gentoo GLSA-200501-16 Normal: Konqueror Java Applet Access Risk

gentoo
Calendar Grey January 11, 2005
Scroller Gentoo
Utilize unauthorized modules through Java enclosure in Konqueror, threatening the host environment. Update recommended.
The Java sandbox environment in Konqueror can be bypassed to access arbitrary packages, allowing untrusted Java applets to perform unrestricted actions on the host system

Summary

Gentoo Linux Security Advisory GLSA 200501-16 https://security.gentoo.org/ Severity: Normal Title: Konqueror: Java sandbox vulnerabilities Date: January 11, 2005 Bugs: #72750 ID: 200501-16

Synopsis ======= The Java sandbox environment in Konqueror can be bypassed to access arbitrary packages, allowing untrusted Java applets to perform unrestricted actions on the host system.
Background ========= KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. Konqueror is the KDE web browser and file manager.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 kde-base/kdelibs < 3.3.2 >= 3.3.2
========== Konqueror contains two ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo konqueror normal threat java access untrusted applet sandbox risk

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo konqueror normal threat java access untrusted applet sandbox risk

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround