Homepage

Information Exposure The advisory has been revoked - it doesn't affect any version of package kde4libs  (opens in a new tab)

Threat Intelligence

EPSS
0.42% (75th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN9-KDE4LIBS-602341
  • published10 Sept 2009
  • disclosed10 Sept 2009
Report a new vulnerability Found a mistake?

Introduced: 10 Sep 2009

CVE-2009-2797  (opens in a new tab)
CWE-200  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kde4libs package and not the kde4libs package as distributed by Debian.

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server.