CVE-2004-1171: Kde

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.

Affected products

• Kde Kde: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.3 only; version 3.3.1 only; …
• Mandrakesoft Mandrake Linux: version 10.0 only; version 10.1 only
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only

Published 2005-01-10. Last modified 2026-06-16.