Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities by sarab

    CVE-2008-2517 (GCVE-0-2008-2517)

    Vulnerability from nvd – Published: 2008-06-03 14:00 – Updated: 2024-08-07 09:05
    VLAI
    Summary
    The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2008-05-24 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:05:30.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "sarab-ciphers-information-disclosure(42621)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
          },
          {
            "name": "ADV-2008-1659",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1659/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
          },
          {
            "name": "29364",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29364"
          },
          {
            "name": "30394",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30394"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sarab.sh script in SaraB before 0.2.4 places the dar program\u0027s encryption key on the command line, which allows local users to obtain sensitive information by listing the process."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "sarab-ciphers-information-disclosure(42621)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
        },
        {
          "name": "ADV-2008-1659",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1659/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
        },
        {
          "name": "29364",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29364"
        },
        {
          "name": "30394",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30394"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2517",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The sarab.sh script in SaraB before 0.2.4 places the dar program\u0027s encryption key on the command line, which allows local users to obtain sensitive information by listing the process."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "sarab-ciphers-information-disclosure(42621)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
            },
            {
              "name": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36",
              "refsource": "CONFIRM",
              "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
            },
            {
              "name": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log",
              "refsource": "CONFIRM",
              "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
            },
            {
              "name": "ADV-2008-1659",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1659/references"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
            },
            {
              "name": "29364",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29364"
            },
            {
              "name": "30394",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30394"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2517",
    "datePublished": "2008-06-03T14:00:00.000Z",
    "dateReserved": "2008-06-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:05:30.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2008-2517 (GCVE-0-2008-2517)

    Vulnerability from cvelistv5 – Published: 2008-06-03 14:00 – Updated: 2024-08-07 09:05
    VLAI
    Summary
    The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2008-05-24 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:05:30.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "sarab-ciphers-information-disclosure(42621)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
          },
          {
            "name": "ADV-2008-1659",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1659/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
          },
          {
            "name": "29364",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29364"
          },
          {
            "name": "30394",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30394"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-05-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sarab.sh script in SaraB before 0.2.4 places the dar program\u0027s encryption key on the command line, which allows local users to obtain sensitive information by listing the process."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-07T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "sarab-ciphers-information-disclosure(42621)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
        },
        {
          "name": "ADV-2008-1659",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1659/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
        },
        {
          "name": "29364",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29364"
        },
        {
          "name": "30394",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30394"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2517",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The sarab.sh script in SaraB before 0.2.4 places the dar program\u0027s encryption key on the command line, which allows local users to obtain sensitive information by listing the process."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "sarab-ciphers-information-disclosure(42621)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42621"
            },
            {
              "name": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36",
              "refsource": "CONFIRM",
              "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34\u0026r2=36"
            },
            {
              "name": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log",
              "refsource": "CONFIRM",
              "url": "http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log"
            },
            {
              "name": "ADV-2008-1659",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1659/references"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=601603\u0026group_id=91804"
            },
            {
              "name": "29364",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29364"
            },
            {
              "name": "30394",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30394"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2517",
    "datePublished": "2008-06-03T14:00:00.000Z",
    "dateReserved": "2008-06-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:05:30.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}