PT-2005-2875 · Kde+1 · Kwrite+3

Dirk Mueller · Published 2005-07-26 · Updated 2024-01-25 · CVE-2005-1920

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions KDE versions 3.2.x through 3.4.0

Description The issue affects the Kate and Kwrite applications, where they do not properly set the same permissions on the backup file as were set on the original file. This could allow local users and possibly remote attackers to obtain sensitive information.

Recommendations For KDE versions 3.2.x through 3.4.0, consider updating the permissions handling in the Kate and Kwrite applications to match the original file's permissions for backup files, or apply a configuration change to restrict access to sensitive information until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2005-1920

DSA-804-2

RHSA-2005:612

RHSA-2005_612

Affected Products

Kde

Kate

Kwrite

Red Hat

References · 15

• http://redhat.com/support/errata/RHSA-2005-612.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1920 · Security Note
• http://securityfocus.com/archive/1/427976/100/0/threaded · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200611-21.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_18_sr.html · Vendor Advisory
• http://debian.org/security/2005/dsa-804 · Vendor Advisory
• http://kde.org/info/security/advisory-20050718-1.txt · Vendor Advisory
• http://securityfocus.com/bid/14297 · Note
• http://marc.info/?l=bugtraq&m=112171434023679&w=2 · Note
• http://secunia.com/advisories/16099 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434 · Note
• http://secunia.com/advisories/23099 · Note
• https://redhat.com/security/data/cve/CVE-2005-1920.html · Note
• http://securitytracker.com/id?1014512 · Note
• https://rhn.redhat.com/errata/RHSA-2005-612.html · Note