CVE-2004-0473

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-07-07 · updated 2026-06-16
Weakness: CWE-88

Description

Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.

Affected products

Opera Browser: before 7.50 — fixed in 7.50

How to fix

Upgrade to a fixed version: Opera Browser 7.50. Check the vendor advisory for mitigations.

References

http://security.gentoo.org/glsa/glsa-200405-19.xml
http://securitytracker.com/id?1010142
http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities
http://www.opera.com/linux/changelogs/750/index.dml
http://www.securityfocus.com/bid/10341
https://exchange.xforce.ibmcloud.com/vulnerabilities/16139
http://security.gentoo.org/glsa/glsa-200405-19.xml
http://securitytracker.com/id?1010142
http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities
http://www.opera.com/linux/changelogs/750/index.dml
http://www.securityfocus.com/bid/10341
https://exchange.xforce.ibmcloud.com/vulnerabilities/16139

Get alerted when CVE-2004-0473 or the next vulnerability affects your stack