CVE-2004-1165
Fixed in a distro release EPSS 4%
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Products: kdelibs, kde konqueror
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | kdelibs | 4:2.2.2-13.woody.13 |
| Red Hat Enterprise Linux 3 | kdebase | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdebase-debuginfo | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdebase-devel | 6:3.1.3-5.8 |
| Red Hat Enterprise Linux 3 | kdelibs | 6:3.1.3-6.9 |
| Red Hat Enterprise Linux 3 | kdelibs-debuginfo | 6:3.1.3-6.9 |
| Red Hat Enterprise Linux 3 | kdelibs-devel | 6:3.1.3-6.9 |
| Red Hat Enterprise Linux 4 | kdelibs | 6:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdelibs-debuginfo | 6:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdelibs-devel | 6:3.3.1-3.3 |