CVE-2014-3800

XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.

Date published : 2014-08-07

http://trac.xbmc.org/ticket/15198

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747428