CVE-2008-2517

Description

The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/42621

http://www.vupen.com/english/advisories/2008/1659/references

http://www.securityfocus.com/bid/29364

http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804

http://secunia.com/advisories/30394

http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS