CVE-2006-2442

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.
Configurations

Configuration 1 (hide)

cpe:2.3:a:kphone:kphone:4.2:*:*:*:*:*:*:*

History

21 Nov 2024, 00:11

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830 - Patch () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830 - Patch
References () http://www.debian.org/security/2006/dsa-1062 - () http://www.debian.org/security/2006/dsa-1062 -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2006:089 - () http://www.mandriva.com/security/advisories?name=MDKSA-2006:089 -
References () http://www.securityfocus.com/bid/18049 - () http://www.securityfocus.com/bid/18049 -
References () http://www.vupen.com/english/advisories/2006/1862 - () http://www.vupen.com/english/advisories/2006/1862 -

Information

Published : 2006-05-18 10:02

Updated : 2025-04-03 01:03


NVD link : CVE-2006-2442

Mitre link : CVE-2006-2442

CVE.ORG link : CVE-2006-2442


JSON object : View

Products Affected

kphone

  • kphone