CVE-2006-2442 - kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords

MEDIUM

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords

Published May 18, 2006

4.6

MEDIUM

CVSS 2.0

EPSS 0.34%

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830		x_refsource_CONFIRMPatch
http://www.debian.org/security/2006/dsa-1062		vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDKSA-2006:089		vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/18049		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1862		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2443		Advisory