CVE

Id
9599  
CVE No.
CVE-2004-1171  
Status
Candidate  
Description
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user"s .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.  
Phase
Assigned (20041210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65172 9599 CVE-2004-1171 BUGTRAQ:20041129 Password Disclosure for SMB Shares in KDE"s Konqueror  View
65173 9599 CVE-2004-1171 URL:http://marc.info/?l=bugtraq&m=110178786809694&w=2  View
65174 9599 CVE-2004-1171 FULLDISC:20041129 Password Disclosure for SMB Shares in KDE"s Konqueror  View
65175 9599 CVE-2004-1171 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html  View
65176 9599 CVE-2004-1171 MISC:http://www.sec-consult.com/index.php?id=118  View
65177 9599 CVE-2004-1171 BUGTRAQ:20041209 KDE Security Advisory: plain text password exposure  View
65178 9599 CVE-2004-1171 URL:http://marc.info/?l=bugtraq&m=110261063201488&w=2  View
65179 9599 CVE-2004-1171 CONFIRM:http://www.kde.org/info/security/advisory-20041209-1.txt  View
65180 9599 CVE-2004-1171 GENTOO:GLSA-200412-16  View
65181 9599 CVE-2004-1171 URL:http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml  View
65182 9599 CVE-2004-1171 MANDRAKE:MDKSA-2004:150  View
65183 9599 CVE-2004-1171 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:150  View
65184 9599 CVE-2004-1171 CERT-VN:VU#305294  View
65185 9599 CVE-2004-1171 URL:http://www.kb.cert.org/vuls/id/305294  View
65186 9599 CVE-2004-1171 CIAC:P-051  View
65187 9599 CVE-2004-1171 URL:http://www.ciac.org/ciac/bulletins/p-051.shtml  View
65188 9599 CVE-2004-1171 BID:11866  View
65189 9599 CVE-2004-1171 URL:http://www.securityfocus.com/bid/11866  View
65190 9599 CVE-2004-1171 OSVDB:12248  View
65191 9599 CVE-2004-1171 URL:http://www.osvdb.org/12248  View
65192 9599 CVE-2004-1171 SECTRACK:1012471  View
65193 9599 CVE-2004-1171 URL:http://securitytracker.com/id?1012471  View
65194 9599 CVE-2004-1171 SECUNIA:13560  View
65195 9599 CVE-2004-1171 URL:http://secunia.com/advisories/13560  View
65196 9599 CVE-2004-1171 SECUNIA:13477  View
65197 9599 CVE-2004-1171 URL:http://secunia.com/advisories/13477  View
65198 9599 CVE-2004-1171 SECUNIA:13486  View
65199 9599 CVE-2004-1171 URL:http://secunia.com/advisories/13486  View
65200 9599 CVE-2004-1171 XF:kde-smb-password-plaintext(18267)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62648 JVNDB-2005-000891 Veritas Backup Exec にバッファオーバーフローの脆弱性 Veritas Backup Exec 8.x (8.60.3878 Hotfix 68未満) および 9.x (9.1.4691 Hotfix 40未満) にバッファオーバーフローの脆弱性が確認されています。 CVE-2004-1172 9599 10 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000891.html  View