CVE-2004-1165: Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a...

Security readout for executives and security teams

This is an old Konqueror browser flaw where a malicious FTP link could inject extra commands into the FTP session. The bundle identifies Konqueror 3.3.1 and multiple 2005 Linux vendor advisories, but no current active exploitation evidence. Exposure is most plausible on legacy Linux desktop systems using Konqueror 3.3.1 or vulnerable vendor KDE packages from the 2004-2005 era. Modern supported systems are unlikely to be affected unless obsolete packages remain installed. Prioritize as a legacy exposure cleanup item, not an emergency, unless old Linux desktops or kiosks remain in production. Confirm whether any affected Konqueror-era systems still exist before allocating major response effort. Mitigation focus: Apply relevant vendor updates from Red Hat, Gentoo, Debian, or Mandriva advisories.; Check vendor guidance for exact fixed KDE or Konqueror package versions.; Retire unsupported systems that still run Konqueror 3.3.1-era packages..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.