CVE-2005-1920

Publication date 26 July 2005

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

7.5 · High

Score breakdown

Description

The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.

Status

Package Ubuntu Release Status
kdelibs 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected

Severity score breakdown

CVSS version: CVSS v3.0

Base score 7.5 · High

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Related Ubuntu Security Notices (USN)

    • USN-150-1
    • KDE library vulnerability
    • 21 July 2005

Other references

Access our resources on patching vulnerabilities