Bug 311235

Summary:	kde-base/ksysguard-4.4.1 (?): RCE via Cross Application Scripting
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal	CC:	kde
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.backtrack.it/~emgent/exploits/20100320_Ksysguard_RCE_CAS.txt
Whiteboard:	A2? [invalid]
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	313999

Description Stefan Behte (RETIRED) gentoo-dev

2010-03-24 21:33:21 UTC

RCE via Cross Application Scripting was found in ksysguard.

see $URL.

Comment 1 Andreas K. Hüttel archtester

2010-05-30 19:20:50 UTC

So is this still applicable for 4.4.2 or 4.4.3 ?

Comment 2 Alex Legler (RETIRED) archtester

2010-06-05 13:33:16 UTC

ksysguard lets users monitor remote machines using various transports including a custom command. That's a feature, not a bug. Users should of course only open .sgrd files from trusted sources.