Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.12.2005.150.1
Category:Ubuntu Local Security Checks
Title:Ubuntu: Security Advisory (USN-150-1)
Summary:The remote host is missing an update for the 'kdelibs' package(s) announced via the USN-150-1 advisory.
Description:Summary:
The remote host is missing an update for the 'kdelibs' package(s) announced via the USN-150-1 advisory.

Vulnerability Insight:
Kate and Kwrite create a backup file before saving a modified file.
These backup files were created with default permissions, even if the
original file had more strict permissions set, so that other local
users could possibly read the backup file even if they are not
permitted to read the original file.

Affected Software/OS:
'kdelibs' package(s) on Ubuntu 5.04.

Solution:
Please install the updated package(s).

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2005-1920
1014512
http://securitytracker.com/id?1014512
14297
http://www.securityfocus.com/bid/14297
16099
http://secunia.com/advisories/16099
20050718 [KDE Security Advisory]: Kate backup file permission leak
http://marc.info/?l=bugtraq&m=112171434023679&w=2
23099
http://secunia.com/advisories/23099
DSA-804
http://www.debian.org/security/2005/dsa-804
FLSA:178606
http://www.securityfocus.com/archive/1/427976/100/0/threaded
GLSA-200611-21
http://security.gentoo.org/glsa/glsa-200611-21.xml
RHSA-2005:612
http://www.redhat.com/support/errata/RHSA-2005-612.html
SUSE-SR:2005:018
http://www.novell.com/linux/security/advisories/2005_18_sr.html
http://www.kde.org/info/security/advisory-20050718-1.txt
oval:org.mitre.oval:def:9434
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434
CopyrightCopyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.