Files
cve/2004/CVE-2004-0411.md
T
0xMarcio e9a692de92 Remove links to the retired CIS OVAL Repository
Thirty of thirty sampled returned 404: the service is gone, so all 942
links across 911 entries are permanently dead. 576 entries held nothing
else and drop out of the search index rather than offering a reader a
guaranteed miss.
2026-08-31 00:27:36 +02:00

786 B

CVE-2004-0411

Description

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.