Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

kphone: insecure file creation

Package(s):

kphone

CVE #(s):

CVE-2006-2442

Created:

May 22, 2006

Updated:

May 25, 2006

Description:

Sven Dreyer discovered that KPhone, a Voice over IP client for KDE, creates a configuration file world-readable, which could leak sensitive information like SIP passwords.

Alerts:

Mandriva	MDKSA-2006:089	2006-05-24
Debian	DSA-1062-1	2006-05-19

(Log in to post comments)