OSVDB ID: 18063 Title: KDE Kate/KWrite Backup File Insecure Permission Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Kate/KWrite create a file backup before saving a modified file. These backup files are created with default permissions (as set by umask), even if the original file had more strict permissions set. Depending on system setup, relaxed permissions may make the backup file readable to users who would not have read permission to the original file. Kate/KWrite are network transparent, therefore this disclosure might not be limited to local users. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure, Race Condition Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to KDE version 3.4.1 or higher, as it has been reported to fix this vulnerability. Code patches are provided by KDE for all vulnerable versions. Contact your OS vendor / binary package provider for information about how to obtain updated binary packages. |
Products |
|
References |
|
Credit |
|
cs.tu-berlin.de -