Multiple Code Aurora Forum Products CVE-2013-2599 Local Information Disclosure Vulnerability

Bugtraq ID:	69487
Class:	Design Error
CVE:	CVE-2013-2599
Remote:	No
Local:	Yes
Published:	Jun 03 2014 12:00AM
Updated:	Mar 19 2015 09:35AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Multiple Code Aurora Forum Products CVE-2013-2599 Local Information Disclosure Vulnerability

Multiple Code Aurora Forum Products are prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.

Multiple Code Aurora Forum Products CVE-2013-2599 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Code Aurora Forum Products CVE-2013-2599 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Code Aurora Forum Products CVE-2013-2599 Local Information Disclosure Vulnerability

References:

• Android for MSM Project Homepage (Code Aurora Forum)
  
• Logging of potentially sensitive information via NativeDaemonConnector (CVE-2013 (Code Aurora Forum)
  
• Merge "services/NativeDaemonConnector: Removed default debug logging" (Code Aurora Forum)