CVE

Id
7286  
CVE No.
CVE-2003-0459  
Status
Candidate  
Description
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.  
Phase
Assigned (20030626)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
42699 7286 CVE-2003-0459 CONFIRM:http://www.kde.org/info/security/advisory-20030729-1.txt  View
42700 7286 CVE-2003-0459 FULLDISC:20030729 KDE Security Advisory: Konqueror Referrer Authentication Leak  View
42701 7286 CVE-2003-0459 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007300.html  View
42702 7286 CVE-2003-0459 REDHAT:RHSA-2003:235  View
42703 7286 CVE-2003-0459 URL:http://www.redhat.com/support/errata/RHSA-2003-235.html  View
42704 7286 CVE-2003-0459 REDHAT:RHSA-2003:236  View
42705 7286 CVE-2003-0459 URL:http://www.redhat.com/support/errata/RHSA-2003-236.html  View
42706 7286 CVE-2003-0459 MANDRAKE:MDKSA-2003:079  View
42707 7286 CVE-2003-0459 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:079  View
42708 7286 CVE-2003-0459 TURBO:TLSA-2003-45  View
42709 7286 CVE-2003-0459 URL:http://www.turbolinux.com/security/TLSA-2003-45.txt  View
42710 7286 CVE-2003-0459 DEBIAN:DSA-361  View
42711 7286 CVE-2003-0459 URL:http://www.debian.org/security/2003/dsa-361  View
42712 7286 CVE-2003-0459 CONECTIVA:CLA-2003:747  View
42713 7286 CVE-2003-0459 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747  View
42714 7286 CVE-2003-0459 BUGTRAQ:20030802 [slackware-security] KDE packages updated (SSA:2003-213-01)  View
42715 7286 CVE-2003-0459 URL:http://marc.info/?l=bugtraq&m=105986238428061&w=2  View
42716 7286 CVE-2003-0459 OVAL:oval:org.mitre.oval:def:411  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63491 JVNDB-2003-000217 Win32/OS 2 で動作する Apache HTTP Server の Rotatelogs における制御文字不適切における脆弱性 Win32/OS 2 上で動作する Apache HTTP Server の rotatelogs プログラムの実装の不備により、rotatelogs は特定の制御文字列に対する取り扱いを適切に行わない脆弱性が存在します。 CVE-2003-0460 7286 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000217.html  View