Lucene search

MitreCVE-2007-3143

HistoryJun 11, 2007 - 6:30 p.m.

CVE-2007-3143

2007-06-1118:30:00

mitre

web.nvd.nist.gov

cve-2007-3143

konqueror 3.5.5

visual truncation vulnerability

remote attackers

address bar spoofing

phishing attacks

http basic authentication

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.01

Percentile

83.4%

JSON

Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.

Affected configurations

Nvd

Node

kdekonquerorMatch3.5.5

VendorProductVersionCPE
kdekonqueror3.5.5cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kde	konqueror	3.5.5	cpe:2.3:a:kde:konqueror:3.5.5:::::::*

References

osvdb.org/43465

testing.bitsploit.de/test.html

www.0x000000.com/?i=334

www.securityfocus.com/bid/24352

exchange.xforce.ibmcloud.com/vulnerabilities/34983

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.01

Percentile

83.4%

JSON

Related for CVE-2007-3143