Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Kde | Kde | 3.0.2 | 3.0.2 |
Kde | Kde | 3.0.1 | 3.0.1 |
Kde | Kde | 3.0.3 | 3.0.3 |
Kde | Kde | 3.0.3a | 3.0.3a |