CVE-2004-0473

Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.

• CWE-88

• http://security.gentoo.org/glsa/glsa-200405-19.xmlThird Party Advisory
• http://securitytracker.com/id?1010142Broken Link, Third Party Advisory, VDB Entry
• http://www.idefense.com/application/poi/display?id=104&type=vulnerabilitiesBroken Link
• http://www.opera.com/linux/changelogs/750/index.dmlBroken Link
• http://www.securityfocus.com/bid/10341Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16139Third Party Advisory, VDB Entry
• http://security.gentoo.org/glsa/glsa-200405-19.xmlThird Party Advisory
• http://securitytracker.com/id?1010142Broken Link, Third Party Advisory, VDB Entry
• http://www.idefense.com/application/poi/display?id=104&type=vulnerabilitiesBroken Link
• http://www.opera.com/linux/changelogs/750/index.dmlBroken Link
• http://www.securityfocus.com/bid/10341Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16139Third Party Advisory, VDB Entry

Published

Jul 7, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0467Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers …
• CVE-2004-0468Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) …
• CVE-2004-0469Buffer overflow in the ISAKMP functionality for Check Point …
• CVE-2004-0470BEA WebLogic Server and WebLogic Express 7.0 through SP5 and…
• CVE-2004-0471BEA WebLogic Server and WebLogic Express 7.0 through SP5 and…
• CVE-2004-0472Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-0474Help Center (HelpCtr.exe) may allow remote attackers to read…
• CVE-2004-0475The showHelp function in Internet Explorer 6 on Windows XP P…
• CVE-2004-0476Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router…
• CVE-2004-0477Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL …
• CVE-2004-0478Unknown versions of Mozilla allow remote attackers to cause …
• CVE-2004-0479Internet Explorer 6 allows remote attackers to cause a denia…