Description
eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information.
References
- 6914 vdb-entry
- 20030222 eject 2.0.10 vulnerability mailing-list
- linux-eject-information-disclosure(11380) vdb-entry