Vulnerability in KDE
CVE-2005-1920
The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.037 (89.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 89.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.037 · newest: 0.037 · change: 0.000
Affected products
- KDE
- Debian Linux — versions 3.1
Weakness classification (CWE)
References
- www.novell.com/linux/security/advisories/2005_18_sr.html (vendor-advisory, Broken Link)
- www.securityfocus.com/bid/14297 (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:9434 (Broken Link, signature, vdb-entry)
- www.debian.org/security/2005/dsa-804 (vendor-advisory, Third Party Advisory)
- securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
- www.securityfocus.com/archive/1/427976/100/0/threaded (vendor-advisory, VDB Entry, Third Party Advisory, Broken Link)
- marc.info/ (mailing-list, Mailing List)
- www.kde.org/info/security/advisory-20050718-1.txt (Patch, Vendor Advisory)
- security.gentoo.org/glsa/glsa-200611-21.xml (vendor-advisory, Third Party Advisory)
- secunia.com/advisories/16099 (Broken Link, third-party-advisory)
Frequently asked questions
- What is CVE-2005-1920?
- CVE-2005-1920 is a high-severity vulnerability in KDE, classified under Improper Preservation of Permissions. CVSS score: 7.5/10. Published 2005-07-26.
- How severe is CVE-2005-1920?
- High severity. CVSS v3 base score is 7.5 out of 10.