CVE

Id
8901  
CVE No.
CVE-2004-0473  
Status
Candidate  
Description
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.  
Phase
Assigned (20040513)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56853 8901 CVE-2004-0473 IDEFENSE:20040512 Opera Telnet URI Handler File Creation/Truncation Vulnerability  View
56854 8901 CVE-2004-0473 URL:http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities  View
56855 8901 CVE-2004-0473 CONFIRM:http://www.opera.com/linux/changelogs/750/index.dml  View
56856 8901 CVE-2004-0473 GENTOO:GLSA-200405-19  View
56857 8901 CVE-2004-0473 URL:http://security.gentoo.org/glsa/glsa-200405-19.xml  View
56858 8901 CVE-2004-0473 BID:10341  View
56859 8901 CVE-2004-0473 URL:http://www.securityfocus.com/bid/10341  View
56860 8901 CVE-2004-0473 SECTRACK:1010142  View
56861 8901 CVE-2004-0473 URL:http://securitytracker.com/id?1010142  View
56862 8901 CVE-2004-0473 XF:opera-telnet-file-overwrite(16139)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63862 JVNDB-2002-000189 Microsoft Windows の HelpCtr.exe における任意のファイルを読み込むおよび実行される脆弱性 ------------ CVE-2004-0474 8901 5.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000189.html  View