PT-2005-1467 · Kde · Kmail

Noam Rathaus · Publicado 2005-04-13 · Atualizado 2008-09-05 · CVE-2005-0404

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KMail version 1.7.1

Description The issue allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

Recommendations For KMail version 1.7.1, consider avoiding the use of HTML formatted emails until a fix is available. As a temporary workaround, restrict the interpretation of HTML emails to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0404

Produtos afetados

Kmail

Referências · 6

• 🔥 http://bugs.kde.org/show_bug.cgi?id=96020 · Exploit
• 🔥 https://exploit-db.com/exploits/25375 · Exploit
• 🔥 http://securiteam.com/unixfocus/5GP0B0AFFE.html · Exploit
• http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0404 · Nota de Segurança
• http://secunia.com/advisories/14925 · Aviso do Fabricante