CVE-2004-1165: Kde Kdelibs

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.

Affected products

• Kde Kdelibs: version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.1.4 only; version 3.1.5 only; …
• Kde Konqueror: version 3.3.1 only

Published 2005-01-10. Last modified 2026-06-16.