konversation irc client 0.15 - Multiple Vulnerabilities
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Konversation IRC Client < 0.15.1 Multiple Remote Vulnerabilities | 19 Jan 200500:00 | – | nessus |
| FreeBSD : konversation -- shell script command injection (5c7bb4dd-6a56-11d9-97ec-000c6e8f12ef) | 13 Jul 200500:00 | – | nessus |
| GLSA-200501-34 : Konversation: Various vulnerabilities | 14 Feb 200500:00 | – | nessus |
 | konversation -- shell script command injection | 19 Jan 200500:00 | – | freebsd |
 | CVE-2005-0129 | 22 Jan 200505:00 | – | cve |
 | CVE-2005-0129 | 22 Jan 200505:00 | – | cvelist |
 | CVE-2005-0129 | 22 Jan 200505:00 | – | debiancve |
 | Konversation: Various vulnerabilities | 24 Jan 200500:00 | – | gentoo |
 | CVE-2005-0129 | 14 Apr 200504:00 | – | nvd |
 | FreeBSD Ports: konversation | 4 Sep 200800:00 | – | openvas |
10
source: https://www.securityfocus.com/bid/12312/info
Konversation is a freely available IRC client for KDE windows environments on Linux platforms.
Multiple remote vulnerabilities affect the Konversation IRC client. These issues are due to input validation failures and design flaws.
The first issue is due to a failure of the application to filter various parameters from the IRC environment prior to including them in commands made to the underlying operating system. The second issue affects the QuickButtons functionality of the vulnerable application. Finally a design error causes the quick connect dialogue to confuse a supplied nickname with a supplied password.
An attacker may leverage these issues to execute arbitrary shell and Konversation commands, potentially leading to denial of service attacks and system compromise.
When an unsuspecting user joins a channel named #%n/quit%n and the Part Button their client will quit.
When an unsuspecting user enters a channel named #`kwrite` and executes the /uptime command, the kwrite application will be activated.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Apr 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.10321