CVE:CVE-2003-0459
CNNVD:CNNVD-200308-126
KDE是一款X Windows系统的图形桌面环境。Konqueror是K桌面环境的文件管理器，也可用于浏览WEB。
Konqueror不正确处理HTTP REFERER字段信息，远程攻击者可以利用这个漏洞通过网络嗅探获得用户验证的敏感信息。
Konqueror当提交类似 http://user:password@host/ 的URL请求时，会以明文方式并在用户不知晓的情况下，通过HTTP-referer字段发送出去，第三方用户可以通过截获网络通信获得这些敏感信息。
solution:Upgrade kde konqueror to a higher version than 2.1.1,2.2.2,3.0,3.0.1,3.0.2,3.0.3,3.0.5,3.1,3.1.1,3.1.2,and avoid the version 2.1.1,2.2.2,3.0,3.0.1,3.0.2,3.0.3,3.0.5,3.1,3.1.1,3.1.2; Upgrade kde konqueror_embedded to a higher version than 0.1,and avoid the version 0.1; Upgrade redhat analog_real-time_synthesizer to a higher version than 2.1.1-5,2.2-11,and avoid the version 2.1.1-5,2.2-11; Upgrade redhat kdebase to a higher version than 3.0.3-13,and avoid the version 3.0.3-13; Upgrade redhat kdelibs to a higher version than 2.1.1-5,2.2-11,3.0.0-10,3.1-10,and avoid the version 2.1.1-5,2.2-11,3.0.0-10,3.1-10; Upgrade redhat kdelibs_devel to a higher version than 2.1.1-5,2.2-11,3.0.0-10,3.0.3-8,3.1-10,and avoid the version 2.1.1-5,2.2-11,3.0.0-10,3.0.3-8,3.1-10; Upgrade redhat kdelibs_sound to a higher version than 2.1.1-5,2.2-11,and avoid the version 2.1.1-5,2.2-11; Upgrade redhat kdelibs_sound_devel to a higher version than 2.1.1-5,2.2-11,and avoid the version 2.1.1-5,2.2-11