Vulnerability in Eject

CVE-2003-1399

eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information.

EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.

Affected products

Eject — versions 2.0.10, 2.0.11, 2.0.12
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)