Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2004-1165

Опубликовано: 10 янв. 2005
Источник: nvd
CVSS2: 7.5
EPSS Средний

Описание

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kde:kdelibs:3.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:kde:kdelibs:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:kde:konqueror:3.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.11107
Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 20 лет назад

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

redhat
больше 20 лет назад

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

debian
больше 20 лет назад

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP comma ...

github
больше 3 лет назад

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

fstec
больше 20 лет назад

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 93%
0.11107
Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other