Vulnerability CVE-2004-1145 - CERT Civis.Net

Vulnerability Name:

CVE-2004-1145 (CCN-18596)

Assigned:

2004-12-15

Published:

2004-12-15

Updated:

2017-10-11

Summary:

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2004-1145

Source: CCN
Type: KDE Web site
Getting KDE

Source: BUGTRAQ
Type: UNKNOWN
20041220 KDE Security Advisory: Konqueror Java Vulnerability

Source: CCN
Type: RHSA-2005-065
kdelibs security update

Source: CCN
Type: SA13586
KDE Konqueror Java Sandbox Security Bypass Vulnerabilities

Source: SECUNIA
Type: Patch, Vendor Advisory
13586

Source: CCN
Type: GLSA-200501-16
Konqueror: Java sandbox vulnerabilities

Source: GENTOO
Type: Patch, Vendor Advisory
GLSA-200501-16

Source: MISC
Type: Vendor Advisory
http://www.heise.de/security/dienste/browsercheck/tests/java.shtml

Source: CCN
Type: US-CERT VU#420222
Konqueror fails to restrict access to Java classes

Source: CERT-VN
Type: Patch, Third Party Advisory, US Government Resource
VU#420222

Source: CCN
Type: KDE Security Advisory 2004-12-20
Konqueror Java Vulnerability

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.kde.org/info/security/advisory-20041220-1.txt

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2004:154

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2005:065

Source: CCN
Type: BID-12046
KDE Konqueror Multiple Remote Java Sandbox Bypass Vulnerabilities

Source: XF
Type: UNKNOWN
konqueror-sandbox-restriction-bypass(18596)

Source: XF
Type: UNKNOWN
konqueror-sandbox-restriction-bypass(18596)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10173

Source: SUSE
Type: SUSE-SR:2005:003
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*

OR cpe:/a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*

OR cpe:/a:sgi:propack:3.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:10.0:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*

OR cpe:/o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:arm:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:mips:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.0:*:i386:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.2:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20041145	V	CVE-2004-1145	2015-11-16
oval:org.mitre.oval:def:10173	V	Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.	2013-04-29
oval:com.redhat.rhsa:def:20050065	P	RHSA-2005:065: kdelibs security update (Important)	2005-02-15