Description
Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
References
- http://www.stillhq.com/gtalkbot/000003.html
- http://www.stillhq.com/gtalkbot/
- 22322 vdb-entry
- gtalkbot-ps-information-disclosure(31923) vdb-entry
- 23942 third-party-advisory
- ADV-2007-0408 vdb-entry
- 33071 vdb-entry
- http://freshmeat.net/projects/gtalkbot/?branch_id=67830&release_id=245004