CVE-2004-1145
First published: Wed Dec 15 2004(Updated: )
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ethereal Group Ethereal | =0.10.1 | |
| Ethereal Group Ethereal | =0.9.2 | |
| Conectiva Linux | =9.0 | |
| Ethereal Group Ethereal | =0.9.6 | |
| SGI ProPack | =3.0 | |
| Ethereal Group Ethereal | =0.9.5 | |
| Ethereal Group Ethereal | =0.10.2 | |
| Ethereal Group Ethereal | =0.9.14 | |
| Ethereal Group Ethereal | =0.9.15 | |
| Ethereal Group Ethereal | =0.9.10 | |
| Ethereal Group Ethereal | =0.9.8 | |
| Ethereal Group Ethereal | =0.10.3 | |
| Ethereal Group Ethereal | =0.10.4 | |
| Ethereal Group Ethereal | =0.10.7 | |
| Ethereal Group Ethereal | =0.9.16 | |
| Ethereal Group Ethereal | =0.10.5 | |
| Ethereal Group Ethereal | =0.9.3 | |
| Ethereal Group Ethereal | =0.10 | |
| Ethereal Group Ethereal | =0.9.13 | |
| Ethereal Group Ethereal | =0.9.9 | |
| Ethereal Group Ethereal | =0.9.11 | |
| Ethereal Group Ethereal | =0.9.7 | |
| Ethereal Group Ethereal | =0.9.4 | |
| Ethereal Group Ethereal | =0.9.1 | |
| Conectiva Linux | =10.0 | |
| Ethereal Group Ethereal | =0.10.6 | |
| Ethereal Group Ethereal | =0.9 | |
| Ethereal Group Ethereal | =0.9.12 | |
| Redhat Enterprise Linux | =2.1 | |
| Suse Suse Linux | =9.2 | |
| Redhat Enterprise Linux Desktop | =3.0 | |
| Debian Debian Linux | =3.0 | |
| Suse Suse Linux | =9.0 | |
| Redhat Linux Advanced Workstation | =2.1 | |
| Debian Debian Linux | =3.0 | |
| Suse Suse Linux | =8.2 | |
| Altlinux Alt Linux | =2.3 | |
| Redhat Enterprise Linux | =3.0 | |
| Redhat Enterprise Linux | =2.1 | |
| Debian Debian Linux | =3.0 | |
| Debian Debian Linux | =3.0 | |
| Redhat Enterprise Linux | =2.1 | |
| Suse Suse Linux | =9.0 | |
| Debian Debian Linux | =3.0 | |
| Suse Suse Linux | =8.0 | |
| Debian Debian Linux | =3.0 | |
| Debian Debian Linux | =3.0 | |
| Debian Debian Linux | =3.0 | |
| Redhat Linux Advanced Workstation | =2.1 | |
| Suse Suse Linux | =8.0 | |
| Suse Suse Linux | =9.1 | |
| Altlinux Alt Linux | =2.3 | |
| Redhat Enterprise Linux | =3.0 | |
| Debian Debian Linux | =3.0 | |
| Redhat Enterprise Linux | =2.1 | |
| Debian Debian Linux | =3.0 | |
| Redhat Enterprise Linux | =2.1 | |
| Debian Debian Linux | =3.0 | |
| Suse Suse Linux | =8.1 | |
| Redhat Enterprise Linux | =2.1 | |
| Redhat Enterprise Linux | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.heise.de/security/dienste/browsercheck/tests/java.shtml
- http://www.kde.org/info/security/advisory-20041220-1.txt
- http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml
- http://www.redhat.com/support/errata/RHSA-2005-065.html
- http://www.kb.cert.org/vuls/id/420222
- http://secunia.com/advisories/13586
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:154
- http://marc.info/?l=bugtraq&m=110356286722875&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18596
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173
- collector/nvd-historical
- vendor/ethereal group
- product/ethereal
- canonical/ethereal group ethereal
- vendor/conectiva
- product/linux
- canonical/conectiva linux
- vendor/sgi
- product/propack
- canonical/sgi propack
- vendor/redhat
- product/enterprise linux
- canonical/redhat enterprise linux
- vendor/suse
- product/suse linux
- canonical/suse suse linux
- product/enterprise linux desktop
- canonical/redhat enterprise linux desktop
- vendor/debian
- product/debian linux
- canonical/debian debian linux
- product/linux advanced workstation
- canonical/redhat linux advanced workstation
- vendor/altlinux
- product/alt linux
- canonical/altlinux alt linux
- collector/nvd-index
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/event
- agent/severity
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- version/ethereal group ethereal/0.10.1
- version/ethereal group ethereal/0.9.2
- version/conectiva linux/9.0
- version/ethereal group ethereal/0.9.6
- version/sgi propack/3.0
- version/ethereal group ethereal/0.9.5
- version/ethereal group ethereal/0.10.2
- version/ethereal group ethereal/0.9.14
- version/ethereal group ethereal/0.9.15
- version/ethereal group ethereal/0.9.10
- version/ethereal group ethereal/0.9.8
- version/ethereal group ethereal/0.10.3
- version/ethereal group ethereal/0.10.4
- version/ethereal group ethereal/0.10.7
- version/ethereal group ethereal/0.9.16
- version/ethereal group ethereal/0.10.5
- version/ethereal group ethereal/0.9.3
- version/ethereal group ethereal/0.10
- version/ethereal group ethereal/0.9.13
- version/ethereal group ethereal/0.9.9
- version/ethereal group ethereal/0.9.11
- version/ethereal group ethereal/0.9.7
- version/ethereal group ethereal/0.9.4
- version/ethereal group ethereal/0.9.1
- version/conectiva linux/10.0
- version/ethereal group ethereal/0.10.6
- version/ethereal group ethereal/0.9
- version/ethereal group ethereal/0.9.12
- version/redhat enterprise linux/2.1
- version/suse suse linux/9.2
- version/redhat enterprise linux desktop/3.0
- version/debian debian linux/3.0
- version/suse suse linux/9.0
- version/redhat linux advanced workstation/2.1
- version/suse suse linux/8.2
- version/altlinux alt linux/2.3
- version/redhat enterprise linux/3.0
- version/suse suse linux/8.0
- version/suse suse linux/9.1
- version/suse suse linux/8.1