Home page logo

oss-sec logo oss-sec mailing list archives

Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver
From: Michael Gilbert <michael.s.gilbert () gmail com>
Date: Wed, 3 Aug 2011 22:02:57 -0400

Michael Gilbert wrote:


This may be an odd request.  The proprietary fglrx driver has an
info disclosure flaw in one of it's shell scripts [0].  It passes the
xauth secret cookie in an insecure manner (such that it's exposed to
prying eyes in the output of ps for example).

Ping, can we get an id for this one?


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]