CVE-2004-0411

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/363225	Broken Link Third Party Advisory VDB Entry Vendor Advisory
http://www.kde.org/info/security/advisory-20040517-1.txt	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-222.html	Broken Link
http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html	Broken Link
http://security.gentoo.org/glsa/glsa-200405-11.xml	Third Party Advisory
http://www.debian.org/security/2004/dsa-518	Third Party Advisory
http://www.ciac.org/ciac/bulletins/o-146.shtml	Broken Link
http://www.securityfocus.com/bid/10358	Broken Link Third Party Advisory VDB Entry
http://www.osvdb.org/6107	Broken Link
http://secunia.com/advisories/11602	Broken Link
http://www.securityfocus.com/advisories/6717	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/advisories/6743	Broken Link Third Party Advisory VDB Entry
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843	Broken Link
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635	Broken Link
http://marc.info/?l=bugtraq&m=108481412427344&w=2	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/16163	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954	Tool Signature

Configurations

Configuration 1 (hide)

cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*

Information

Published : 2004-07-07 04:00

Updated : 2022-02-28 17:16

NVD link : CVE-2004-0411

Mitre link : CVE-2004-0411

JSON object : View

Products Affected

kde

konqueror

CWE

CWE-20

Improper Input Validation

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/archive/1/363225", "name": "20040513 Opera Telnet URI Handler Vulnerability also applies to other browsers", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "refsource": "BUGTRAQ"}, {"url": "http://www.kde.org/info/security/advisory-20040517-1.txt", "name": "http://www.kde.org/info/security/advisory-20040517-1.txt", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-222.html", "name": "RHSA-2004:222", "tags": ["Broken Link"], "refsource": "REDHAT"}, {"url": "http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html", "name": "SuSE-SA:2003:014", "tags": ["Broken Link"], "refsource": "SUSE"}, {"url": "http://security.gentoo.org/glsa/glsa-200405-11.xml", "name": "GLSA-200405-11", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://www.debian.org/security/2004/dsa-518", "name": "DSA-518", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://www.ciac.org/ciac/bulletins/o-146.shtml", "name": "O-146", "tags": ["Broken Link"], "refsource": "CIAC"}, {"url": "http://www.securityfocus.com/bid/10358", "name": "10358", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.osvdb.org/6107", "name": "6107", "tags": ["Broken Link"], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/11602", "name": "11602", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/advisories/6717", "name": "FEDORA-2004-121", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "refsource": "FEDORA"}, {"url": "http://www.securityfocus.com/advisories/6743", "name": "FEDORA-2004-122", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "refsource": "FEDORA"}, {"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843", "name": "CLA-2004:843", "tags": ["Broken Link"], "refsource": "CONECTIVA"}, {"url": "http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635", "name": "SSA:2004-238", "tags": ["Broken Link"], "refsource": "SLACKWARE"}, {"url": "http://marc.info/?l=bugtraq&m=108481412427344&w=2", "name": "20040517 KDE Security Advisory: URI Handler Vulnerabilities", "tags": ["Mailing List"], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16163", "name": "kde-url-handler-gain-access(16163)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954", "name": "oval:org.mitre.oval:def:954", "tags": ["Tool Signature"], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter \"-\" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0411", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2004-07-07T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.2.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-02-28T17:16Z"}