CVE:CVE-2004-1145
CNNVD:CNNVD-200412-068
KDE是一款X Windows系统的图形桌面环境。Konqueror是K桌面环境的文件管理器，也可用于浏览WEB。
Konqueror WEB浏览器存在两个漏洞，远程攻击者可以利用这些漏洞绕过安全限制，执行恶意Java Applet。
第一个问题是通过JavaScript可访问受限制的Java类，可导致提升Java-Applet的权限，另外一个问题是Konqueror不正确限制从Java-applet自身访问部分Java类，可导致特权提升。
当用户使用开启Java功能的Konqueror访问恶意页面时，站点可运行Java-applet，提升特权，允许以用户进程权限读写任意文件。
solution:Upgrade ethereal_group ethereal to a higher version than 0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,and avoid the version 0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade altlinux alt_linux to a higher version than 2.3,and avoid the version 2.3; Upgrade debian debian_linux to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade suse suse_linux to a higher version than 8.0,8.1,8.2,9.0,9.1,9.2,and avoid the version 8.0,8.1,8.2,9.0,9.1,9.2