CVE-2002-1282

KDE 2.x-2.1 - Remote Code Execution via Telnet KIO Subsystem URL Handling

Title source: manual
STIX 2.1

Description

Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.

References (10)

Core 10
Core References
Various Sources vendor-advisory x_refsource_caldera
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103728981029342&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/8298
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10603.php
Patch, Vendor Advisory x_refsource_confirm
http://www.kde.org/info/security/advisory-20021111-1.txt
Various Sources vendor-advisory x_refsource_mandrake
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103712550205730&w=2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2002/dsa-204
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-220.html
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6182

Scores

EPSS 0.0812
EPSS Percentile 92.3%

Details

Status published
Products (11)
kde/kde 2.1
kde/kde 2.1.1
kde/kde 2.1.2
kde/kde 2.2
kde/kde 2.2.1
kde/kde 2.2.2
kde/kde 3.0
kde/kde 3.0.1
kde/kde 3.0.2
kde/kde 3.0.3
... and 1 more
Published Nov 29, 2002
Tracked Since Feb 18, 2026