[Bug 34892] Username and password world readable in cleartext from quanta configfile

karl karloie at gmail.com
Tue Mar 14 13:40:12 UTC 2006


Public bug reported:
https://launchpad.net/malone/bugs/34892

Affects: kdewebdev quanta (Ubuntu)
       Severity: Normal
       Priority: (none set)
         Status: Unconfirmed

Description:
Anybody with an account can read this file from another user and steal
login/passwords for ftp/sftp/ssh hosts defined in Quanta projects.

less /home/someotheruser/.kde/share/config/quantarc

Karl Øie




More information about the kubuntu-bugs mailing list