CVE-2005-1920

The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.

• CWE-281

• http://marc.info/?l=bugtraq&m=112171434023679&w=2Mailing List
• http://secunia.com/advisories/16099Broken Link
• http://secunia.com/advisories/23099Broken Link
• http://security.gentoo.org/glsa/glsa-200611-21.xmlThird Party Advisory
• http://securitytracker.com/id?1014512Broken Link, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2005/dsa-804Third Party Advisory
• http://www.kde.org/info/security/advisory-20050718-1.txtPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2005_18_sr.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2005-612.htmlBroken Link
• http://www.securityfocus.com/archive/1/427976/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/14297Broken Link, Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434Broken Link
• http://marc.info/?l=bugtraq&m=112171434023679&w=2Mailing List
• http://secunia.com/advisories/16099Broken Link
• http://secunia.com/advisories/23099Broken Link
• http://security.gentoo.org/glsa/glsa-200611-21.xmlThird Party Advisory
• http://securitytracker.com/id?1014512Broken Link, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2005/dsa-804Third Party Advisory
• http://www.kde.org/info/security/advisory-20050718-1.txtPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2005_18_sr.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2005-612.htmlBroken Link
• http://www.securityfocus.com/archive/1/427976/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/14297Broken Link, Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9434Broken Link

Published

Jul 26, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1914CenterICQ 4.20.0 and earlier creates temporary files with pr…
• CVE-2005-1915The log4sh_readProperties function in log4sh 1.2.5 and earli…
• CVE-2005-1916linki.py in ekg 2005-06-05 and earlier allows local users to…5.5
• CVE-2005-1917kpopper 1.0 and earlier allows local users to create and ove…
• CVE-2005-1918The original patch for a GNU tar directory traversal vulnera…
• CVE-2005-1919Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-1921Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earli…
• CVE-2005-1922The MS-Expand file handling in Clam AntiVirus (ClamAV) befor…
• CVE-2005-1923The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV…
• CVE-2005-1924The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allo…
• CVE-2005-1925Multiple directory traversal vulnerabilities in Tikiwiki bef…
• CVE-2005-1928Trend Micro ServerProtect EarthAgent for Windows Management …