CVE-2007-0627 Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
MediumCVSS 4.9
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael still gtalkbot | <= 1.1 | No fix listed |
References
- freshmeat.net
- 33071 vdb-entry
- 23942 third-party-advisory
- 22322 vdb-entry
- www.stillhq.com
- www.stillhq.com
- ADV-2007-0408 vdb-entry
- gtalkbot-ps-information-disclosure(31923) vdb-entry