NVD

Id
71561  
Name
CVE-2004-1171  
Description
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370159 71561 CVE-2004-1171 20041129 Password Disclosure for SMB Shares in KDE"s Konqueror  View
370160 71561 CVE-2004-1171 20041129 Password Disclosure for SMB Shares in KDE"s Konqueror  View
370161 71561 CVE-2004-1171 20041209 KDE Security Advisory: plain text password exposure  View
370162 71561 CVE-2004-1171 1012471  View
370163 71561 CVE-2004-1171 P-051  View
370164 71561 CVE-2004-1171 GLSA-200412-16  View
370165 71561 CVE-2004-1171 VU#305294  View
370166 71561 CVE-2004-1171 http://www.kde.org/info/security/advisory-20041209-1.txt  View
370167 71561 CVE-2004-1171 MDKSA-2004:150  View
370168 71561 CVE-2004-1171 http://www.sec-consult.com/index.php?id=118  View
370169 71561 CVE-2004-1171 11866  View
370170 71561 CVE-2004-1171 kde-smb-password-plaintext(18267)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63262 JVNDB-2004-000623 ショートカットにSMB認証情報が平文で保存される可能性 SMB ヘアクセスするショートカットを作成した場合、認証情報がショートカット内に平文で保存される可能性があります。 CVE-2004-1171 9598 CVE-2004-1171 71561 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000623.html 2004-12-17 2008-11-21 View