oss-sec mailing list archives
Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver
From: Michael Gilbert <michael.s.gilbert () gmail com>
Date: Wed, 3 Aug 2011 22:02:57 -0400
Michael Gilbert wrote:
Hi, This may be an odd request. The proprietary fglrx driver has an info disclosure flaw in one of it's shell scripts [0]. It passes the xauth secret cookie in an insecure manner (such that it's exposed to prying eyes in the output of ps for example).
Ping, can we get an id for this one? Thanks, Mike
Current thread:
- cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver Michael Gilbert (Jul 18)
- Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver Mike O'Connor (Jul 21)
- Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver Michael Gilbert (Jul 22)
- Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver Michael Gilbert (Aug 03)
- Re: cve id request: insecure xauth cookie handling in fglrx (ati catalyst) driver Mike O'Connor (Jul 21)