Search vulnerabilities

Results 4

Export CSV
CVE-2003-0459

security flaw

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
CVE-2003-0547

security flaw

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2003-0548

security flaw

The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2003-0549

security flaw

The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Products