QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-1171

Back to search

CVE-2004-1171

Published: Dec 10, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.

VendorProductVersions

n/a

n/a

affected
n/a

References

13486
third-party-advisory
x_refsource_SECUNIA
VU#305294
third-party-advisory
x_refsource_CERT-VN
11866
vdb-entry
x_refsource_BID
1012471
vdb-entry
x_refsource_SECTRACK
P-051
third-party-advisory
government-resource
x_refsource_CIAC
13560
third-party-advisory
x_refsource_SECUNIA
kde-smb-password-plaintext(18267)
vdb-entry
x_refsource_XF
MDKSA-2004:150
vendor-advisory
x_refsource_MANDRAKE
12248
vdb-entry
x_refsource_OSVDB
GLSA-200412-16
vendor-advisory
x_refsource_GENTOO
13477
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now