CVE-2002-1224

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.

Affected products

Kde, Red Hat, Kaboodle, Kamera, Karm, Kcharselect, Kcoloredit, Kde-I18N

Kde

= 3.0.1, 3.0.2, 3.0.3, 3.0.3a

CVSS 2.0

5.0 MEDIUM

EPSS

8.8% (95th percentile)

NVD status

Modified

Published

2004-09-01