CVE Feed

    Dashboard / CVE / CVE-2004-1165

    CVE-2004-1165

    Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

    Published:Dec 5, 2004
    Last Modified:Apr 16, 2026
    EPS:Dec 10, 2004
    EPSS Score:0.14087
    CVSS Score:7.5

    Affected Products

    Vendor
    Kde
    Product
    Kdelibs
    Vendor
    Kde
    Product
    Konqueror
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://www.exploit-db.com/exploits/24801

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-8422 (CVSS 7.8) — KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a calle…
    CVE-2017-6410 (CVSS 5.5) — kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with …
    CVE-2015-7543 (CVSS 7) — aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local u…
    CVE-2014-3494 (CVSS 4.3) — kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly genera…
    CVE-2014-5033 (CVSS 6.9) — KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit autho…
    CVE-2013-2074 (CVSS 5) — kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a cra…
    CVE-2009-2702 (CVSS 7.5) — KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Su…

    References

    http://marc.info/?l=bugtraq&m=110245752232681&w=2
    http://www.debian.org/security/2005/dsa-631
    http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2005:045
    http://www.redhat.com/support/errata/RHSA-2005-009.html
    http://www.redhat.com/support/errata/RHSA-2005-065.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/18384
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9645
    http://marc.info/?l=bugtraq&m=110245752232681&w=2
    http://www.debian.org/security/2005/dsa-631
    http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2005:045
    http://www.redhat.com/support/errata/RHSA-2005-009.html
    http://www.redhat.com/support/errata/RHSA-2005-065.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/18384
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9645

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High