Vulnerability in Kde
CVE-2005-1920
The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.
EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Kde
- Debian Debian_linux — versions 3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, Broken Link, x_refsource_SUSE)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- secalert@redhat.com (Broken Link, x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory, VDB Entry, Third Party Advisory, Broken Link)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ, Mailing List)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
Frequently asked questions
- What is CVE-2005-1920?
- CVE-2005-1920 is a high-severity vulnerability in Kde, classified under Improper Preservation of Permissions. CVSS score: 7.5/10. Published 2005-07-26.
- How severe is CVE-2005-1920?
- High severity. CVSS v3 base score is 7.5 out of 10.