VULNERABILITY INTELLIGENCE

CVE-2008-2517

CVSS score2.1 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2008-06-03
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references