CVE-2004-0411

N/A Unknown

Published: July 07, 2004 Modified: April 16, 2026

Description

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843

Source: cve@mitre.org

Broken Link

http://marc.info/?l=bugtraq&m=108481412427344&w=2

Source: cve@mitre.org

Mailing List Third Party Advisory

http://secunia.com/advisories/11602

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-200405-11.xml

Source: cve@mitre.org

Third Party Advisory

http://www.ciac.org/ciac/bulletins/o-146.shtml

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2004/dsa-518

Source: cve@mitre.org

Third Party Advisory

http://www.kde.org/info/security/advisory-20040517-1.txt

Source: cve@mitre.org

Patch Vendor Advisory

http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/6107

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-222.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/advisories/6717

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/advisories/6743

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/363225

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry Vendor Advisory

http://www.securityfocus.com/bid/10358

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/16163

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954

Source: cve@mitre.org

Broken Link Tool Signature

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843