CVE-2004-1171

{"id": "CVE-2004-1171", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-01-10T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=110178786809694&w=2", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=110261063201488&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/13477", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/13486", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/13560", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1012471", "source": "cve@mitre.org"}, {"url": "http://www.ciac.org/ciac/bulletins/p-051.shtml", "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/305294", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kde.org/info/security/advisory-20041209-1.txt", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:150", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/12248", "source": "cve@mitre.org"}, {"url": "http://www.sec-consult.com/index.php?id=118", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11866", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18267", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=110178786809694&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=110261063201488&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/13477", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/13486", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/13560", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1012471", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ciac.org/ciac/bulletins/p-051.shtml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/305294", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kde.org/info/security/advisory-20041209-1.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:150", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/12248", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.sec-consult.com/index.php?id=118", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/11866", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18267", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares."}], "lastModified": "2024-11-20T23:50:16.267", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82F69843-978D-4686-BC5B-1D09DA4A21BD"}, {"criteria": "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACEE0AED-7918-41E9-A902-AC4070E03132"}, {"criteria": "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81E19472-47B4-4398-A188-CA5A5D3E7060"}, {"criteria": "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D17407A2-089E-43A5-9BD5-EFF966F5CC16"}, {"criteria": "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C4B436D-8D6A-473E-B707-26147208808B"}, {"criteria": "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E26B353-4985-4116-B97A-5767CDC732F1"}, {"criteria": "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"}, {"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"}, {"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"}, {"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3528DABD-B821-4D23-AE12-614A9CA92C46"}, {"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E661D58-18DF-4CCF-9892-F873618F4535"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6996B14-925B-46B8-982F-3545328B506B"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC80CF67-C51D-442C-9526-CFEDE84A6304"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}