5

CVE-2004-1145

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ethereal Group ≫ Ethereal Version 0.9
Ethereal Group ≫ Ethereal Version 0.9.1
Ethereal Group ≫ Ethereal Version 0.9.2
Ethereal Group ≫ Ethereal Version 0.9.3
Ethereal Group ≫ Ethereal Version 0.9.4
Ethereal Group ≫ Ethereal Version 0.9.5
Ethereal Group ≫ Ethereal Version 0.9.6
Ethereal Group ≫ Ethereal Version 0.9.7
Ethereal Group ≫ Ethereal Version 0.9.8
Ethereal Group ≫ Ethereal Version 0.9.9
Ethereal Group ≫ Ethereal Version 0.9.10
Ethereal Group ≫ Ethereal Version 0.9.11
Ethereal Group ≫ Ethereal Version 0.9.12
Ethereal Group ≫ Ethereal Version 0.9.13
Ethereal Group ≫ Ethereal Version 0.9.14
Ethereal Group ≫ Ethereal Version 0.9.15
Ethereal Group ≫ Ethereal Version 0.9.16
Ethereal Group ≫ Ethereal Version 0.10
Ethereal Group ≫ Ethereal Version 0.10.1
Ethereal Group ≫ Ethereal Version 0.10.2
Ethereal Group ≫ Ethereal Version 0.10.3
Ethereal Group ≫ Ethereal Version 0.10.4
Ethereal Group ≫ Ethereal Version 0.10.5
Ethereal Group ≫ Ethereal Version 0.10.6
Ethereal Group ≫ Ethereal Version 0.10.7
Sgi ≫ Propack Version 3.0
Conectiva ≫ Linux Version 9.0
Conectiva ≫ Linux Version 10.0
Altlinux ≫ Alt Linux Version 2.3 Edition compact
Altlinux ≫ Alt Linux Version 2.3 Edition junior
Debian ≫ Debian Linux Version 3.0 Edition alpha
Debian ≫ Debian Linux Version 3.0 Edition arm
Debian ≫ Debian Linux Version 3.0 Edition hppa
Debian ≫ Debian Linux Version 3.0 Edition ia-32
Debian ≫ Debian Linux Version 3.0 Edition ia-64
Debian ≫ Debian Linux Version 3.0 Edition m68k
Debian ≫ Debian Linux Version 3.0 Edition mips
Debian ≫ Debian Linux Version 3.0 Edition mipsel
Debian ≫ Debian Linux Version 3.0 Edition ppc
Debian ≫ Debian Linux Version 3.0 Edition s-390
Debian ≫ Debian Linux Version 3.0 Edition sparc
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64
Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server
Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor
Suse ≫ Suse Linux Version 8.0
Suse ≫ Suse Linux Version 8.0 Edition i386
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1
Suse ≫ Suse Linux Version 9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.13% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=110356286722875&w=2
http://secunia.com/advisories/13586
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml
Patch
Vendor Advisory
http://www.heise.de/security/dienste/browsercheck/tests/java.shtml
Vendor Advisory
http://www.kb.cert.org/vuls/id/420222
Patch
Third Party Advisory
US Government Resource
http://www.kde.org/info/security/advisory-20041220-1.txt
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:154
http://www.redhat.com/support/errata/RHSA-2005-065.html
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18596
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173