Launchpad.net

CVE 2014-3494

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.

Related bugs and status

CVE-2014-3494 (Candidate) is related to these bugs:

Bug #1327591: SRU tracking bug for KDE SC 4.13.2

		In	Importance	Status
1327591	SRU tracking bug for KDE SC 4.13.2	kde4libs (Ubuntu)	Undecided	Invalid
1327591	SRU tracking bug for KDE SC 4.13.2	kde4libs (Ubuntu Trusty)	Undecided	Fix Released
1327591	SRU tracking bug for KDE SC 4.13.2	kde4libs (Ubuntu Utopic)	Undecided	Invalid

Bug #1332064: [CVE-2014-3494] KMail/KIO POP3 SSL MITM Flaw

		In	Importance	Status
1332064	[CVE-2014-3494] KMail/KIO POP3 SSL MITM Flaw	kde4libs (Ubuntu)	Undecided	Fix Released
1332064	[CVE-2014-3494] KMail/KIO POP3 SSL MITM Flaw	kde4libs (Ubuntu Trusty)	Undecided	Fix Released
1332064	[CVE-2014-3494] KMail/KIO POP3 SSL MITM Flaw	kde4libs (Ubuntu Utopic)	Undecided	Fix Released
1332064	[CVE-2014-3494] KMail/KIO POP3 SSL MITM Flaw	kde4libs (Ubuntu Saucy)	Undecided	Fix Released

Bug #1349296: SRU tracking bug for KDE SC 4.13.3

		In	Importance	Status
1349296	SRU tracking bug for KDE SC 4.13.3	kde4libs (Ubuntu)	Undecided	Invalid
1349296	SRU tracking bug for KDE SC 4.13.3	kde4libs (Ubuntu Trusty)	Undecided	Fix Released
1349296	SRU tracking bug for KDE SC 4.13.3	kubuntu-meta (Ubuntu)	Undecided	Fix Released
1349296	SRU tracking bug for KDE SC 4.13.3	kubuntu-meta (Ubuntu Trusty)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-3494

Related bugs and status

Related bugs

References