diff options
| author | Michael Landin <mich@FreeBSD.org> | 2005-07-18 20:07:26 +0000 |
|---|---|---|
| committer | Michael Landin <mich@FreeBSD.org> | 2005-07-18 20:07:26 +0000 |
| commit | 4ccb5ee963780581c79078984a63629f9db06431 (patch) | |
| tree | 7d55509ef5e3b569e4210bb4ab3869cb6ca8d5ee /security/vuxml/vuln.xml | |
| parent | - Use PLIST_FILES (diff) | |
o add kdebase (kate) vulnarability.
Reviewed by: simon
Notes
Notes:
svn path=/head/; revision=139531
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 7fcdc5e552f9..2b750ec549ba 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,39 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="2e116ba5-f7c3-11d9-928e-000b5d7e6dd5"> + <topic>kdebase -- Kate backup file permission leak</topic> + <affects> + <package> + <name>kdebase</name> + <range><ge>3.2.0</ge><lt>3.4.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A KDE Security Advisory explains:</p> + <blockquote cite="http://www.kde.org/info/security/advisory-20050718-1.txt"> + <p>Kate / Kwrite create a file backup before saving a modified + file. These backup files are created with default permissions, + even if the original file had more strict permissions set.</p> + <p>Depending on the system security settings, backup files + might be readable by other users. Kate / Kwrite are + network transparent applications and therefore this + vulnerability might not be restricted to local users.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CAN-2005-1920</cvename> + <url>https://bugs.kde.org/show_bug.cgi?id=103331</url> + <url>http://www.kde.org/info/security/advisory-20050718-1.txt</url> + </references> + <dates> + <discovery>2005-07-18</discovery> + <entry>2005-07-18</entry> + </dates> + </vuln> + <vuln vid="5d72701a-f601-11d9-bcd1-02061b08fc24"> <topic>firefox & mozilla -- multiple vulnerabilities</topic> <affects> |