FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1920

This CVE name corresponds to:

Entered	Topic
2005-07-18	kdebase -- Kate backup file permission leak

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1920 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1920
Phase	Assigned(20050608)

Description

The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.

References

Source	Reference
BUGTRAQ	20050718 [KDE Security Advisory]: Kate backup file permission leak
CONFIRM	http://www.kde.org/info/security/advisory-20050718-1.txt
DEBIAN	DSA-804
FEDORA	FLSA:178606
GENTOO	GLSA-200611-21
REDHAT	RHSA-2005:612
SUSE	SUSE-SR:2005:018
BID	14297
OVAL	oval:org.mitre.oval:def:9434
SECTRACK	1014512
SECUNIA	16099
SECUNIA	23099