PT-2004-1550 · Kde+1 · Kde+2

Published 2004-05-20 · Updated 2024-02-13 · CVE-2004-0411

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KDE versions 3.2.2 and earlier

Description The issue is related to the URI handlers in Konqueror, which do not properly filter "-" characters that begin a hostname in certain URIs, such as telnet, rlogin, ssh, or mailto. This allows remote attackers to manipulate the options passed to associated programs, possibly reading arbitrary files or executing arbitrary code. The problem is triggered by an input validation error within the telnet URI handler, where a specially crafted request containing "-" characters can pass options to the telnet utility, potentially allowing the creation or truncation of arbitrary files and resulting in a loss of integrity.

Recommendations For KDE versions 3.2.2 and earlier, consider disabling the telnet URI handler as a temporary workaround until a patch is available. Restrict access to the telnet utility to minimize the risk of exploitation. Avoid using the "-" character in the hostname of telnet, rlogin, ssh, or mailto URIs to prevent manipulation of options passed to the associated programs.

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2004-0411

DSA-518

Affected Products

Kde

Konqueror

Opera

References · 23

• http://securityfocus.com/advisories/6717 · Vendor Advisory
• http://debian.org/security/2004/dsa-518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0411 · Security Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_14_kdelibs.html · Vendor Advisory
• http://kde.org/info/security/advisory-20040517-1.txt · Vendor Advisory
• http://securityfocus.com/advisories/6743 · Vendor Advisory
• http://securityfocus.com/archive/1/363225 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200405-11.xml · Vendor Advisory
• http://slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-222.html · Vendor Advisory
• http://secunia.com/advisories/11602 · Note
• http://xforce.iss.net/xforce/xfdb/16163 · Note
• http://securityfocus.com/bid/10358 · Note
• http://ciac.org/ciac/bulletins/o-146.shtml · Note