CVE-2005-0131
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as...
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
Exploit likelihood
What each source reports
NVD Score used
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
CVE-2005-0131- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
CVE-2005-0131- Updated
- 2026-11-02
EUVDEUVD-2005-0132 No score
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
EUVD-2005-0132- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mfx8-57jr-25r5 No score
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as...
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
GHSA-mfx8-57jr-25r5- Updated
- 2026-11-02
OSV No score
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
CVE-2005-0131- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0131 No score
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.
- Record
DEBIAN-CVE-2005-0131- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
konversationDebian:12 |
before 0.15-3 | 0.15-3 |
konversationDebian:13 |
before 0.15-3 | 0.15-3 |
konversationDebian:14 |
before 0.15-3 | 0.15-3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0131 is a medium vulnerability (CVSS 5.0) in Berlios Konversation, published January 22, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in konversation 0.15-3.