CVE-2004-0689: Debian Linux

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.

Affected products

• Debian Debian Linux: version 3.0 only
• Kde Kde: before 3.3 (fixed in 3.3)

Published 2004-09-28. Last modified 2026-06-16.