Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-01-09 21:00
Updated : 2017-10-10 18:29
NVD link : CVE-2004-1165
Mitre link : CVE-2004-1165
JSON object : View
CWE
Products Affected
kde
- kdelibs
- konqueror