First published: Thu May 20 2004(Updated: )
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Opera | <7.50 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0473 is classified as a high severity vulnerability due to its ability to allow remote command execution.
To fix CVE-2004-0473, upgrade to Opera version 7.50 or later where this vulnerability has been addressed.
CVE-2004-0473 can be exploited through crafted telnet URIs that manipulate the command line parameters of the Opera browser.
CVE-2004-0473 affects all versions of Opera before 7.50.
The impact of CVE-2004-0473 includes the potential for attackers to overwrite arbitrary files on affected systems.