NetSight
IP …
high7.5Public exploit code

CVE-2004-1165

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command,…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

Affected products

VendorProductAffected versions
KdeKdelibs
Versions 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5
KdeKonqueror
Version 3.3.1

References