Secunia Research has discovered a vulnerability in KDE, which can be exploited by malicious people to bypass certain security features. The vulnerability is caused by KGet downloading files without the user’s acknowledgment, overwriting existing files of the same name when displaying a dialog box that allows a user to choose the file to download out of the options offered by a metalink file. KDE version 4.4.2 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89523/secunia-kdekgetifo.txt
Source: https://packetstormsecurity.com/files/89523/KDE-KGet-Insecure-File-Operation-Vulnerability.html