dtach Information Disclosure Vulnerability

http://www.securityfocus.com/bid/54209

Security Info

Bugtraq ID:	54209
Class:	Design Error
CVE:	CVE-2012-3368
Remote:	Yes
Local:	No
Published:	Apr 04 2012 12:00AM
Updated:	Jun 29 2012 10:30AM
Credit:	The vendor reported this issue.
Vulnerable:	Red Hat Fedora 17 Red Hat Fedora 16 Red Hat Fedora 15 Red Hat Fedora 14 Red Hat Fedora 13 Red Hat Fedora 12 Red Hat Fedora 11 Red Hat Fedora 10

Not Vulnerable:

Security Discussion

dtach prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information.

Proof of Concept and Security Exploits

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

Security Solution(s)

Solution:
Vendor updates are available. Please see the references for more information.

Security References(s)

References:

Emagined Security Blog featuring Dr. Eugene Schultz

Secure Web Programming
by Vizual Services