Hi, 
a url spoofing attack was discovered. 
 
---------- Forwarded message ---------- 
Date: Thu, 3 Jun 2004 18:38:14 -0400 (EDT) 
From: Steven M. Christey <coley@mitre.org> 
To: mjc@redhat.com, mdz@debian.org, nectar@celabo.org 
Cc: coley@mitre.org 
Subject: CAN-2004-0527 = KDE Konqueror "DEEP SEA PHISHING" issue 
 
 
SecurityFocus reported that KDE Konqueror is vulnerable to the "URL 
spoofing via image map" problem that was originally reported for 
Internet Explorer here: 
 
 BUGTRAQ:20040510 DEEP SEA PHISHING: Internet Explorer / Outlook Express 
 URL:http://marc.theaimsgroup.com/?l=bugtraq&m=108422905510713&w=2 
 BUGTRAQ:20040517 Microsoft Internet Explorer ImageMap URL Spoof Vulnerability 
 URL:http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html 
 
I've assigned CAN-2004-0527 to the issue. 
 
Hopefully this doesn't turn into a major "slippery slope" problem with 
who-knows-how-many variants to be discovered. 
 
- Steve 
 
 
====================================================== 
Candidate: CAN-2004-0527 
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0527 
Final-Decision: 
Interim-Decision: 
Modified: 
Proposed: 
Assigned: 20040603 
Category: SF 
Reference: BID:10383 
Reference: URL:http://www.securityfocus.com/bid/10383 
 
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a 
legitimate URL in the status bar via A HREF tags with modified "alt" 
values that point to the legitimate site, combined with an image map 
whose href points to the malicious site, which facilitates a 
"phishing" attack. 
----------------------------------------------------------------