CVE-2004-0411 Command injection in n/a

High 7.5 Published 20 May 2004 Updated 8 Aug 2024

Remote attackers can execute arbitrary code or read files by manipulating URI options in Konqueror via crafted telnet, rlogin, ssh, or mailto links.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2004-0411?

CVE-2004-0411 is a high-severity command injection vulnerability in n/a, published on 20 May 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

Weakness: CWE-88

Which versions are affected by CVE-2004-0411?

It affects 1 product.

Products include Kde Konqueror.

How do I fix CVE-2004-0411?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2004-0411 being exploited?

There is no known exploitation of CVE-2004-0411 in the wild and no public exploit code.

Sources

Also known as DSA-518, GHSA-rgp9-mx7h-rwqv.