Showing 1 - 2 of 2

CVE-2019-3500

Status Candidate

Overview

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.

Related Files

Ubuntu Security Notice USN-3965-1: Posted May 6, 2019; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 3965-1 - Dhiraj Mishra discovered that aria2 incorrectly stored authentication information. A local attacker could possibly use this issue to obtain credentials.; tags | advisory, local; systems | linux, ubuntu; advisories | CVE-2019-3500; SHA-256 | 40dcc8ac374b67c7b85a791b82e2300742a7f0cf707bd67f6a709bfb67a36dbe; Download | Favorite | View

aria2 1.33.1 Password Disclosure: Posted Jan 2, 2019; Authored by Dhiraj Mishra; aria2 version 1.33.1 suffers from a password disclosure vulnerability when logging URLs with secrets in them.; tags | exploit, info disclosure; advisories | CVE-2019-3500; SHA-256 | c9a89b510de5819685313fe5c01392487764e5029cdba9ab6aea6eed65444c6a; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 236 files
Ubuntu 56 files
Debian 19 files
LiquidWorm 16 files
Apple 9 files
Gentoo 5 files
Alter Prime 3 files
Google Security Research 3 files
Pierre Kim 2 files
EQSTLab 2 files

File Archives

Systems

AIX (430)
Apple (2,126)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,163)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,604)
HPUX (881)
iOS (393)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,945)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,337)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,987)
UNIX (9,475)
UnixWare (188)
Windows (6,784)
Other

CVE-2019-3500

Overview

Related Files

File Archive:

November 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems