Launchpad.net

CVE 2006-2442

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.

See the CVE page on Mitre.org for more details.

References