CVEvulnerability
CVE-2008-2517
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-06-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process.
Affected configurations
• sarab sarab (<= 0.2.3)
• sarab sarab 0.2.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36 Exploit
- http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log sarab.svn.sourceforge.net
- http://secunia.com/advisories/30394 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804 sourceforge.net
- http://www.securityfocus.com/bid/29364 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1659/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42621 exchange.xforce.ibmcloud.com
- http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36 Exploit
- http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log sarab.svn.sourceforge.net
- http://secunia.com/advisories/30394 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804 sourceforge.net
- http://www.securityfocus.com/bid/29364 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1659/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42621 exchange.xforce.ibmcloud.com