Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Sonderling

#38221de 53,633
7.2CVSS total
Vulnerabilidades · 1
PT-2005-2387
7.2
2005-05-02
Cocktail · Cocktail · CVE-2005-1387
Name of the Vulnerable Software and Affected Versions: Cocktail versions 3.5.4 and earlier Description: The issue allows local users to gain sensitive information by running a process listing, as the administrative password is passed to `sudo` in cleartext. Recommendations: For versions 3.5.4 and earlier, consider restricting access to the `sudo` command until a fix is available, or avoid running process listings that could expose sensitive information.