CVE-2005-0754

EPSS 2.28%
Published 22.04.2005 04:00:00
Last modified 03.04.2025 01:03:51
Source secalert@redhat.com
Teams watchlist Login
Open Login

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Kde ≫ Quanta Version3.1

Conectiva ≫ Linux Version9.0

Conectiva ≫ Linux Version10.0

Gentoo ≫ Linux

Kde ≫ Kde Version3.2

Kde ≫ Kde Version3.2.1

Kde ≫ Kde Version3.2.2

Kde ≫ Kde Version3.2.3

Kde ≫ Kde Version3.3

Kde ≫ Kde Version3.3.1

Kde ≫ Kde Version3.3.2

Kde ≫ Kde Version3.4

Redhat ≫ Fedora Core Versioncore_3.0

Ubuntu ≫ Ubuntu Linux Version4.1 Editionia64

Ubuntu ≫ Ubuntu Linux Version4.1 Editionppc

Ubuntu ≫ Ubuntu Linux Version5.04 Editionamd64

Ubuntu ≫ Ubuntu Linux Version5.04 Editioni386

Ubuntu ≫ Ubuntu Linux Version5.04 Editionpowerpc

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.28%	0.832

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdewebdev-kommander.diff

Vendor Advisory

http://marc.info/?l=bugtraq&m=111419664411051&w=2

http://secunia.com/advisories/15060

Patch

Vendor Advisory

http://www.kde.org/info/security/advisory-20050420-1.txt

Patch

Vendor Advisory

http://www.securityfocus.com/bid/13313

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2005-0754

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0754

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0754

EUVD