CVE

Id
39191  
CVE No.
CVE-2009-1756  
Status
Candidate  
Description
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments.  
Phase
Assigned (20090521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430943 39191 CVE-2009-1756 MLIST:[oss-security] 20090518 CVE id request: slim  View
430944 39191 CVE-2009-1756 URL:http://www.openwall.com/lists/oss-security/2009/05/18/2  View
430945 39191 CVE-2009-1756 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306  View
430946 39191 CVE-2009-1756 FEDORA:FEDORA-2009-13551  View
430947 39191 CVE-2009-1756 URL:https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html  View
430948 39191 CVE-2009-1756 FEDORA:FEDORA-2009-13552  View
430949 39191 CVE-2009-1756 URL:https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html  View
430950 39191 CVE-2009-1756 BID:35015  View
430951 39191 CVE-2009-1756 URL:http://www.securityfocus.com/bid/35015  View
430952 39191 CVE-2009-1756 OSVDB:54583  View
430953 39191 CVE-2009-1756 URL:http://osvdb.org/54583  View
430954 39191 CVE-2009-1756 SECUNIA:35132  View
430955 39191 CVE-2009-1756 URL:http://secunia.com/advisories/35132  View
430956 39191 CVE-2009-1756 SECUNIA:38070  View
430957 39191 CVE-2009-1756 URL:http://secunia.com/advisories/38070  View
430958 39191 CVE-2009-1756 XF:slim-xauthority-info-disclosure(50611)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45022 JVNDB-2009-006029 firetorrent などで使用されている Rasterbar libtorrent におけるディレクトリトラバーサルの脆弱性 firetorrent、qBittorrent、deluge Torrent などのアプリケーションで使用されている Rasterbar libtorrent の src/torrent_info.cpp には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-1760 39191 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006029.html  View