Vulnerability in Kphone

CVE-2006-2442

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

Affected products

Kphone — versions 4.2
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_CONFIRM, Patch)