full-disclosure - [ Suresec Advisories ] - Mac OS X (xnu) multiple information leaks.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <319717e08e101beb2827175330b2cbdc@suresec.org>
Date: Mon Nov  7 19:57:57 2005
From: advisories at suresec.org (suresec advisories)
Subject: [ Suresec Advisories ] - Mac OS X (xnu) multiple
	information leaks. 

Suresec Security Advisory - #00008

07/11/2005

Mac OS X (xnu) - Multiple information leaks.
Advisory: http://www.suresec.org/advisories/adv8.pdf

Description:
The Mac OS X kernel has several information leaks.

In certain cases this might be sensitive information, such as portions 
of
the file cache or terminal buffers. This information might be directly 
useful,
or it might be leveraged to obtain elevated privileges in some way. For
example, a terminal buffer might include a user-entered password.

These vulnerabilities were discovered by Ilja van Sprundel.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 658 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051107/bb3db97e/attachment.bin