kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2014-02-05T19:00:00
Updated: 2014-02-05T18:57:01
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-2074
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-02-05T19:55:28.703
Modified: 2014-02-25T00:26:38.617
Link: CVE-2013-2074
JSON object: View
Redhat Information
No data.
CWE