kphone: insecure file creation
| Package(s): | kphone | CVE #(s): | CVE-2006-2442 | ||||||||
| Created: | May 22, 2006 | Updated: | May 25, 2006 | ||||||||
| Description: | Sven Dreyer discovered that KPhone, a Voice over IP client for KDE, creates a configuration file world-readable, which could leak sensitive information like SIP passwords. | ||||||||||
| Alerts: |
| ||||||||||