exploit-db-mirror/exploits/linux/remote/21934.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

7 lines
No EOL
546 B
Text

source: https://www.securityfocus.com/bid/5951/info
A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system.
It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files outside of the 'shared directory' root. The ability to read files outside of the shared root directory would be dependent upon the privileges of the kpf process.
http://127.0.0.1:8001/?icon=/usr/local/kde/share/icons/hicolor/32x32/mimetypes/image.png