KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.

Two vulnerabilities were discovered in kdelibs :

  - CAN-2003-0459: KDE Konqueror for KDE 3.1.2 and earlier     does not remove authentication credentials from URLs of     the 'user:password@host' form in the HTTP-Referer     header, which could allow remote web sites to steal the     credentials for pages that link to the sites.
  - CAN-2003-0370: Konqueror Embedded and KDE 2.2.2 and     earlier does not validate the Common Name (CN) field for     X.509 Certificates, which could allow remote attackers     to spoof certificates via a man-in-the-middle attack.

These vulnerabilities are described in the following security advisories from KDE :

  - 
  -

A vulnerability in Konqueror was discovered where it could inadvertently send authentication credentials to websites other than the intended site in clear text via the HTTP-referer header when authentication credentials are passed as part of a URL in the form http://user:password@host/.

The provided packages have a patch that corrects this issue.

This erratum provides updated KDE packages that resolve a security issue in Konquerer.

KDE is a graphical desktop environment for the X Window System.
Konqueror is the file manager for the K Desktop Environment.

George Staikos reported that Konqueror may inadvertently send authentication credentials to websites other than the intended website in clear text via the HTTP-referer header. This can occur when authentication credentials are passed as part of a URL in the form http://user:password@host/

Users of Konqueror are advised to upgrade to these erratum packages, which contain a backported security patch correcting this issue.

ID	Name	Product	Family	Severity
15198	Debian DSA-361-2 : kdelibs, kdelibs-crypto - several vulnerabilities	Nessus	Debian Local Security Checks	high
14062	Mandrake Linux Security Advisory : kdelibs (MDKSA-2003:079)	Nessus	Mandriva Local Security Checks	medium
12409	RHEL 2.1 : kdelibs (RHSA-2003:236)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2003-0459

critical

Tenable Plugins

high

medium

medium