Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KDE SMB用户凭证 信息泄露漏洞
Vulnerability Description
KDE是一个运行于类Unix操作系统的桌面环境。 KDE 3.2.x及3.3.0至3.3.2版本中存在信息泄露漏洞。 在保存用户手工输入或由 SMB 协议处理器创建的SMB用户凭证时，KDE以明文方式将用户凭证保存于用户的.desktop文件中，而该文件是所有人可读的。使得本地用户可以获取SMB用户名和密码，从而获得远程资源。
CVSS Information
N/A
Vulnerability Type
N/A