Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1165. PoCs published by Albert Puigsech Galicia.
AI-analyzed exploit summary This is a writeup describing a vulnerability in KDE FTP kioslave-based applications like Konqueror, where arbitrary FTP commands can be injected via maliciously crafted URIs. The issue allows attackers to execute commands on FTP servers or send emails without user interaction.
Description
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Exploits (1)
This is a writeup describing a vulnerability in KDE FTP kioslave-based applications like Konqueror, where arbitrary FTP commands can be injected via maliciously crafted URIs. The issue allows attackers to execute commands on FTP servers or send emails without user interaction.