CVE

Id
9593  
CVE No.
CVE-2004-1165  
Status
Candidate  
Description
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.  
Phase
Assigned (20041209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65101 9593 CVE-2004-1165 BUGTRAQ:20041205 7a69Adv#16 - Konqueror FTP command injection  View
65102 9593 CVE-2004-1165 URL:http://marc.info/?l=bugtraq&m=110245752232681&w=2  View
65103 9593 CVE-2004-1165 DEBIAN:DSA-631  View
65104 9593 CVE-2004-1165 URL:http://www.debian.org/security/2005/dsa-631  View
65105 9593 CVE-2004-1165 GENTOO:GLSA-200501-18  View
65106 9593 CVE-2004-1165 URL:http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml  View
65107 9593 CVE-2004-1165 MANDRAKE:MDKSA-2005:045  View
65108 9593 CVE-2004-1165 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:045  View
65109 9593 CVE-2004-1165 REDHAT:RHSA-2005:009  View
65110 9593 CVE-2004-1165 URL:http://www.redhat.com/support/errata/RHSA-2005-009.html  View
65111 9593 CVE-2004-1165 REDHAT:RHSA-2005:065  View
65112 9593 CVE-2004-1165 URL:http://www.redhat.com/support/errata/RHSA-2005-065.html  View
65113 9593 CVE-2004-1165 OVAL:oval:org.mitre.oval:def:9645  View
65114 9593 CVE-2004-1165 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9645  View
65115 9593 CVE-2004-1165 XF:web-browser-ftp-command-execution(18384)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63167 JVNDB-2004-000509 Microsoft Internet Explorer における任意の FTP コマンドを実行される脆弱性 ------------ CVE-2004-1166 9593 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000509.html  View