CVE-2004-1165 Command injection in n/a

High 7.5 Published 10 Dec 2004 Updated 8 Aug 2024

Remote attackers can execute arbitrary FTP commands in Konqueror by tricking users into visiting a malicious ftp:// URL containing encoded newlines.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2004-1165?

CVE-2004-1165 is a high-severity command injection vulnerability in n/a, published on 10 Dec 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

Which versions are affected by CVE-2004-1165?

It affects 2 products.

Products include Kde Kdelibs, Kde Konqueror.

How do I fix CVE-2004-1165?

Apply the vendor's patch.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2004-1165 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-1165 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as DSA-631-1, GHSA-jg55-cw7x-6vvc.