Lucene search
PRIOn knowledge basePRION:CVE-2008-2517HistoryJun 03, 2008 - 2:32 p.m.
Command injection
2008-06-0314:32:00
PRIOn knowledge base
www.prio-n.com
2
The sarab.sh script in SaraB before 0.2.4 places the dar program’s encryption key on the command line, which allows local users to obtain sensitive information by listing the process.
References
sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36
sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log
secunia.com/advisories/30394
sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804
www.securityfocus.com/bid/29364
www.vupen.com/english/advisories/2008/1659/references
exchange.xforce.ibmcloud.com/vulnerabilities/42621
Related
cvelist
cvelist
CVE-2008-2517
2008-06-03 14:00:00
nvd
nvd
CVE-2008-2517
2008-06-03 14:32:00
cve
cve
CVE-2008-2517
2008-06-03 14:32:00