surf 'cookie jar' Local Information Disclosure Vulnerability

Bugtraq ID:	51953
Class:	Design Error
CVE:	CVE-2012-0842
Remote:	No
Local:	Yes
Published:	Feb 09 2012 12:00AM
Updated:	Feb 09 2012 12:00AM
Credit:	Jakub Wilk
Vulnerable:	Canonical surf 0.4.1-4.1
Not Vulnerable:

surf 'cookie jar' Local Information Disclosure Vulnerability

surf is prone to an information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may lead to further attacks.

surf 0.4.1-4.1 is vulnerable; other versions may also be affected.

surf 'cookie jar' Local Information Disclosure Vulnerability

Attackers can use standard commands to exploit this issue.

surf 'cookie jar' Local Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

surf 'cookie jar' Local Information Disclosure Vulnerability

References:

• surf Homepage (Canonical )
  
• surf: world-readable cookie jar (Debian )