Debian Security Advisory DSA 804-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 804-1. KDE developers have reported a vulnerability in the backup file handling of Kate and Kwrite. The backup files are created with default permissions, even if the original file had more strict permissions set. This cou...

GLSA-200611-21 : Kile: Incorrect backup file permission

The remote host is affected by the vulnerability described in GLSA-200611-21 Kile: Incorrect backup file permission Kile fails to set the same permissions on backup files as on the original file. This is similar to CVE-2005-1920. Impact : A kile user may inadvertently grant access to sensitive...

CentOS 4 : kdelibs (CESA-2005:612)

Updated kdelibs packages are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text...

[SECURITY] [DSA 804-1] New kdelibs packages fix backup file information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 804-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...

RHEL 4 : kdelibs (RHSA-2005:612)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:612 advisory. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on...

CVE-2005-1920

The CVE-2005-1920 issue affects KDE 3.2.x–3.4.0 (kdelibs3/kdebase); backup files could have improper permissions, allowing local users to access sensitive data. Connected advisories (e.g., Debian DSA-804-2, Red Hat RHSA-2005:612, Ubuntu USN-150-1, Gentoo GLSA 200611-21) document security updates ...

CVE-2005-1920

The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...

Fedora Core 3 : kdelibs-3.3.1-2.14.FC3 (2005-594)

A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on system settings it may be possible for a local user to read the backup files created by Kate or Kwrite. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-1920 to this issue. User...