Red Hat Kdebase vulnerabilities

4 CVEs affecting Red Hat Kdebase, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0549, published 2003-08-27.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0459, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal…
• CVE-2003-0548, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than…
• CVE-2003-0549, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.
• CVE-2003-0547, published 2003-08-27. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.