Skip to content
OpenAdvisories
Unscored DSA-1062-1 1 CVE

kphone - insecure file creation

Published May 19, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 kphone 1:4.1.0-2sarge1

Vulnerabilities 1

  • Unscored —

    kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP pas…