CVE-2013-2074 in KDE
Summary
kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.
Reservation
02/19/2013
Disclosure
02/05/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8659 | KDE http.cpp m_request.url.url information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2013-2074 |