EUVD-2003-0453

Malware in sbrugna...

Debian DSA-361-2 : kdelibs, kdelibs-crypto - several vulnerabilities

Two vulnerabilities were discovered in kdelibs : - CAN-2003-0459: KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the 'user:password@host' form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that li...