CVE-2004-0411

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or…

published May 20, 2004

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07778 · 94.6th percentile
Published
2004-05-20T04:00Z
EPSS history
Timeline
  • 20 MAY 04:00Z
    The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or…
    cvelistv5