KDE Kate, KWrite Local Backup File Information Disclosure Vulnerability

Bugtraq ID:	14297
Class:	Design Error
CVE:	CVE-2005-1920
Remote:	No
Local:	Yes
Published:	Jul 18 2005 12:00AM
Updated:	Dec 22 2006 12:04AM
Credit:	[email protected] reported this issue to the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Redhat Linux 9.0 i386 Redhat Linux 7.3 i386 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 KDE kdelibs 3.0 + KDE KDE 3.1 KDE KDE 3.4 KDE KDE 3.3.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 s/390 + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 ppc + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mipsel + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 mips + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 m68k + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 hppa + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 arm + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 amd64 + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 alpha + Debian Linux 3.1 alpha + Debian Linux 3.1 + Debian Linux 3.1 + Debian Linux 3.1 KDE KDE 3.3.2 KDE KDE 3.3.1 + Redhat Fedora Core3 KDE KDE 3.3 KDE KDE 3.2.3 KDE KDE 3.2.2 + KDE KDE 3.2.2 + Redhat Fedora Core2 KDE KDE 3.2.1 KDE KDE 3.2 Gentoo Linux
Not Vulnerable:	KDE KDE 3.4.1 + Redhat Fedora Core4

KDE Kate, KWrite Local Backup File Information Disclosure Vulnerability

KDE kate and kwrite are susceptible to a local information-disclosure vulnerability. The applications fail to maintain secure file permissions when creating backup files.

This vulnerability allows local attackers to gain access to the contents of potentially sensitive files.

Note: Since these applications are network-aware, under some unknown circumstances, this issue may not be restricted to local attackers.

KDE Kate, KWrite Local Backup File Information Disclosure Vulnerability

An exploit is not required.

KDE Kate, KWrite Local Backup File Information Disclosure Vulnerability

Solution:
Please see the referenced advisories for more information.


KDE kdelibs 3.0

• RedHat kdelibs-3.0.5a-0.73.7.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/kdelibs-3.0.5 a-0.73.7.legacy.i386.rpm


• RedHat kdelibs-devel-3.0.5a-0.73.7.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/kdelibs-devel -3.0.5a-0.73.7.legacy.i386.rpm

KDE KDE 3.2

• KDE post-3.2.3-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kate.dif f


• Mandriva corporate/3.0/RPMS/kdelibs-common-3.2-36.14.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva corporate/3.0/RPMS/libkdecore4-3.2-36.14.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva corporate/3.0/RPMS/libkdecore4-devel-3.2-36.14.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/3.0/RPMS/kdelibs-common-3.2-36.14.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/3.0/RPMS/lib64kdecore4-3.2-36.14.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/3.0/RPMS/lib64kdecore4-devel-3.2-36.14.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/3.0/RPMS/libkdecore4-3.2-36.14.C30mdk.i586.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3

KDE KDE 3.2.1

• KDE post-3.2.3-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kate.dif f

KDE KDE 3.2.2

• KDE post-3.2.3-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kate.dif f

KDE KDE 3.2.3

• KDE post-3.2.3-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.2.3-kdelibs-kate.dif f


• Mandriva 10.1/RPMS/kdelibs-common-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva 10.1/RPMS/libkdecore4-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva 10.1/RPMS/libkdecore4-devel-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva 10.2/RPMS/libkdecore4-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/kdelibs-common-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/lib64kdecore4-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/lib64kdecore4-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/lib64kdecore4-devel-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/libkdecore4-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/libkdecore4-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/libkdecore4-devel-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3

KDE KDE 3.3

• KDE post-3.3.2-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdelibs-kate.dif f

KDE KDE 3.3.1

• KDE post-3.3.2-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdelibs-kate.dif f

KDE KDE 3.3.2

• Debian kdelibs4-dev_3.3.2-6.2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_alpha.deb


• Debian kdelibs4-dev_3.3.2-6.2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_amd64.deb


• Debian kdelibs4-dev_3.3.2-6.2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_arm.deb


• Debian kdelibs4-dev_3.3.2-6.2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_hppa.deb


• Debian kdelibs4-dev_3.3.2-6.2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_i386.deb


• Debian kdelibs4-dev_3.3.2-6.2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_ia64.deb


• Debian kdelibs4-dev_3.3.2-6.2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_m68k.deb


• Debian kdelibs4-dev_3.3.2-6.2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_mips.deb


• Debian kdelibs4-dev_3.3.2-6.2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_mipsel.deb


• Debian kdelibs4-dev_3.3.2-6.2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_powerpc.deb


• Debian kdelibs4-dev_3.3.2-6.2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_s390.deb


• Debian kdelibs4-dev_3.3.2-6.2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.2_sparc.deb


• Debian kdelibs4-doc_3.3.2-6.2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-doc_3. 3.2-6.2_all.deb


• Debian kdelibs4_3.3.2-6.2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_alpha.deb


• Debian kdelibs4_3.3.2-6.2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_amd64.deb


• Debian kdelibs4_3.3.2-6.2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_arm.deb


• Debian kdelibs4_3.3.2-6.2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_hppa.deb


• Debian kdelibs4_3.3.2-6.2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_i386.deb


• Debian kdelibs4_3.3.2-6.2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_ia64.deb


• Debian kdelibs4_3.3.2-6.2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_m68k.deb


• Debian kdelibs4_3.3.2-6.2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_mips.deb


• Debian kdelibs4_3.3.2-6.2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_mipsel.deb


• Debian kdelibs4_3.3.2-6.2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_powerpc.deb


• Debian kdelibs4_3.3.2-6.2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_s390.deb


• Debian kdelibs4_3.3.2-6.2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.2_sparc.deb


• KDE post-3.3.2-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdelibs-kate.dif f


• Mandriva x86_64/10.1/RPMS/libkdecore4-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/libkdecore4-devel-3.2.3-106.2.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3

KDE KDE 3.3.2

• Debian kdelibs-bin_3.3.2-6.3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_alpha.deb


• Debian kdelibs-bin_3.3.2-6.3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_amd64.deb


• Debian kdelibs-bin_3.3.2-6.3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_arm.deb


• Debian kdelibs-bin_3.3.2-6.3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_hppa.deb


• Debian kdelibs-bin_3.3.2-6.3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_i386.deb


• Debian kdelibs-bin_3.3.2-6.3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_ia64.deb


• Debian kdelibs-bin_3.3.2-6.3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_m68k.deb


• Debian kdelibs-bin_3.3.2-6.3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_mips.deb


• Debian kdelibs-bin_3.3.2-6.3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_mipsel.deb


• Debian kdelibs-bin_3.3.2-6.3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_powerpc.deb


• Debian kdelibs-bin_3.3.2-6.3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_s390.deb


• Debian kdelibs-bin_3.3.2-6.3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-bin_3.3 .2-6.3_sparc.deb


• Debian kdelibs-data_3.3.2-6.3_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs-data_3. 3.2-6.3_all.deb


• Debian kdelibs4-dev_3.3.2-6.3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_alpha.deb


• Debian kdelibs4-dev_3.3.2-6.3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_amd64.deb


• Debian kdelibs4-dev_3.3.2-6.3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_arm.deb


• Debian kdelibs4-dev_3.3.2-6.3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_hppa.deb


• Debian kdelibs4-dev_3.3.2-6.3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_i386.deb


• Debian kdelibs4-dev_3.3.2-6.3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_ia64.deb


• Debian kdelibs4-dev_3.3.2-6.3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_m68k.deb


• Debian kdelibs4-dev_3.3.2-6.3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_mips.deb


• Debian kdelibs4-dev_3.3.2-6.3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_mipsel.deb


• Debian kdelibs4-dev_3.3.2-6.3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_powerpc.deb


• Debian kdelibs4-dev_3.3.2-6.3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_s390.deb


• Debian kdelibs4-dev_3.3.2-6.3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-dev_3. 3.2-6.3_sparc.deb


• Debian kdelibs4-doc_3.3.2-6.3_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4-doc_3. 3.2-6.3_all.deb


• Debian kdelibs4_3.3.2-6.3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_alpha.deb


• Debian kdelibs4_3.3.2-6.3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_amd64.deb


• Debian kdelibs4_3.3.2-6.3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_arm.deb


• Debian kdelibs4_3.3.2-6.3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_hppa.deb


• Debian kdelibs4_3.3.2-6.3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_i386.deb


• Debian kdelibs4_3.3.2-6.3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_ia64.deb


• Debian kdelibs4_3.3.2-6.3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_m68k.deb


• Debian kdelibs4_3.3.2-6.3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_mips.deb


• Debian kdelibs4_3.3.2-6.3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_mipsel.deb


• Debian kdelibs4_3.3.2-6.3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_powerpc.deb


• Debian kdelibs4_3.3.2-6.3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_s390.deb


• Debian kdelibs4_3.3.2-6.3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/k/kdelibs/kdelibs4_3.3.2- 6.3_sparc.deb


• KDE post-3.3.2-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.3.2-kdelibs-kate.dif f


• Mandriva 10.2/RPMS/kdelibs-common-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva 10.2/RPMS/libkdecore4-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva 10.2/RPMS/libkdecore4-devel-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/lib64kdecore4-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.1/RPMS/lib64kdecore4-devel-3.2.3-106.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.2/RPMS/kdelibs-common-3.3.2-124.2.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.2/RPMS/lib64kdecore4-3.3.2-124.2.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.2/RPMS/lib64kdecore4-devel-3.3.2-124.2.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.2/RPMS/libkdecore4-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/10.2/RPMS/libkdecore4-devel-3.3.2-124.2.102mdk.i586.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3

KDE KDE 3.4

• KDE post-3.4.0-kdelibs-kate.diff
  ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.0-kdelibs-kate.dif f


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.3_amd64.deb


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.3_i386.deb


• Ubuntu kdelibs-bin_3.4.0-0ubuntu3.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-bin_3.4. 0-0ubuntu3.3_powerpc.deb


• Ubuntu kdelibs-data_3.4.0-0ubuntu3.3_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs-data_3.4 .0-0ubuntu3.3_all.deb


• Ubuntu kdelibs_3.4.0-0ubuntu3.3_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs_3.4.0-0u buntu3.3_all.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.3_amd64.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.3_i386.deb


• Ubuntu kdelibs4-dev_3.4.0-0ubuntu3.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-dev_3.4 .0-0ubuntu3.3_powerpc.deb


• Ubuntu kdelibs4-doc_3.4.0-0ubuntu3.3_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4-doc_3.4 .0-0ubuntu3.3_all.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.3_amd64.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.3_i386.deb


• Ubuntu kdelibs4_3.4.0-0ubuntu3.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/k/kdelibs/kdelibs4_3.4.0-0 ubuntu3.3_powerpc.deb

KDE Kate, KWrite Local Backup File Information Disclosure Vulnerability

References:

• Bug 103331: Backup permissions higher than original permissions (KDE)
  
• KDE Home Page (KDE)
  
• RHSA-2005:612-07 - kdelibs security update (RedHat)
  
• [KDE Security Advisory]: Kate backup file permission leak (Dirk Mueller )