Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.

A XSS vulnerability in the way KHTML handles error pages has been fixed. CVE-2011-1168 has been assigned to this issue.

From Red Hat Security Advisory 2011:0464 :

Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kdelibs packages provide libraries for the K Desktop Environment (KDE).

A cross-site scripting (XSS) flaw was found in the way KHTML, the HTML layout engine used by KDE applications such as the Konqueror web browser, displayed certain error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2011-1168)

A flaw was found in the way kdelibs checked the user specified hostname against the name in the server's SSL certificate. A man-in-the-middle attacker could use this flaw to trick an application using kdelibs into mistakenly accepting a certificate as if it was valid for the host, if that certificate was issued for an IP address to which the user specified hostname was resolved to. (CVE-2011-1094)

Note: As part of the fix for CVE-2011-1094, this update also introduces stricter handling for wildcards used in servers' SSL certificates.

Users should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

A cross-site scripting (XSS) flaw was found in the way KHTML, the HTML layout engine used by KDE applications such as the Konqueror web browser, displayed certain error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2011-1168)

A flaw was found in the way kdelibs checked the user specified hostname against the name in the server's SSL certificate. A man-in-the-middle attacker could use this flaw to trick an application using kdelibs into mistakenly accepting a certificate as if it was valid for the host, if that certificate was issued for an IP address to which the user specified hostname was resolved to. (CVE-2011-1094)

Note: As part of the fix for CVE-2011-1094, this update also introduces stricter handling for wildcards used in servers' SSL certificates.

The desktop must be restarted (log out, then log back in) for this update to take effect.

It was discovered that KDE KSSL did not properly verify X.509 certificates when the certificate was issued for an IP address. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.
(CVE-2011-1094)

Tim Brown discovered that KDE KHTML did not properly escape URLs from externally generated error pages. An attacker could exploit this to conduct cross-site scripting attacks. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data (such as passwords), within the same domain. (CVE-2011-1168).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A new kdelibs package is available for Slackware 13.1 to fix a security issue.

This update fixes a cross-site scripting (XSS) vulnerability in the way KHTML handles error pages. (CVE-2011-1168)

Updated kdelibs packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kdelibs packages provide libraries for the K Desktop Environment (KDE).

A cross-site scripting (XSS) flaw was found in the way KHTML, the HTML layout engine used by KDE applications such as the Konqueror web browser, displayed certain error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2011-1168)

A flaw was found in the way kdelibs checked the user specified hostname against the name in the server's SSL certificate. A man-in-the-middle attacker could use this flaw to trick an application using kdelibs into mistakenly accepting a certificate as if it was valid for the host, if that certificate was issued for an IP address to which the user specified hostname was resolved to. (CVE-2011-1094)

Note: As part of the fix for CVE-2011-1094, this update also introduces stricter handling for wildcards used in servers' SSL certificates.

Users should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

This update is the second in a series of monthly stabilization updates to the 4.6 series. 4.6.2 brings many bugfixes and translation updates on top of the latest edition in the 4.6 series and is a recommended update for everyone running 4.6.1 or earlier versions. See also:
http://kde.org/announcements/announce-4.6.2.php

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update is the second in a series of monthly stabilization updates to the 4.6 series. 4.6.2 brings many bugfixes and translation updates on top of the latest edition in the 4.6 series and is a recommended update for everyone running 4.6.1 or earlier versions. See also:
http://kde.org/announcements/announce-4.6.2.php

Also included is a new exiv2-0.21.x release, see:
http://exiv2.org/whatsnew.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been found and corrected in kdelibs4 :

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site (CVE-2011-1168).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been patched to correct this issue.

ID	Name	Product	Family	Severity
75877	openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0480-1)	Nessus	SuSE Local Security Checks	medium
75546	openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0480-1)	Nessus	SuSE Local Security Checks	medium
68259	Oracle Linux 6 : kdelibs (ELSA-2011-0464)	Nessus	Oracle Linux Local Security Checks	medium
61023	Scientific Linux Security Update : kdelibs on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
55068	Ubuntu 9.10 / 10.04 LTS / 10.10 : kde4libs vulnerabilities (USN-1110-1)	Nessus	Ubuntu Local Security Checks	medium
54902	Slackware 13.1 : kdelibs (SSA:2011-101-02)	Nessus	Slackware Local Security Checks	medium
54840	SuSE 11.1 Security Update : kdelibs4 (SAT Patch Number 4407)	Nessus	SuSE Local Security Checks	medium
53884	openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0480-1)	Nessus	SuSE Local Security Checks	medium
53525	RHEL 6 : kdelibs (RHSA-2011:0464)	Nessus	Red Hat Local Security Checks	medium
53520	Fedora 15 : kde-l10n-4.6.2-1.fc15.1 / kdeaccessibility-4.6.2-1.fc15 / kdeadmin-4.6.2-2.fc15 / etc (2011-5221)	Nessus	Fedora Local Security Checks	medium
53519	Fedora 14 : darktable-0.8-7.fc14.1 / exiv2-0.21.1-1.fc14 / geeqie-1.0-9.fc14.1 / gipfel-0.3.2-7.fc14 / etc (2011-5200)	Nessus	Fedora Local Security Checks	medium
53509	Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2011:075)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2011-1168

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium