FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0689

This CVE name corresponds to:

Entered	Topic
2004-08-12	kdelibs insecure temporary file handling

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0689 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0689
Phase	Assigned(20040713)

Description

KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.

References

Source	Reference
BUGTRAQ	20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities
CONFIRM	http://www.kde.org/info/security/advisory-20040811-1.txt
CONECTIVA	CLA-2004:864
DEBIAN	DSA-539
GENTOO	200408-13
OVAL	oval:org.mitre.oval:def:9334
SECUNIA	12276
XF	kde-application-symlink(16963)