medium5.5
CVE-2024-23770
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
Impact
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unix4lyfe | Darkhttpd | through 1.15 |
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2024/01/25/1
- https://github.com/emikulic/darkhttpd/commit/2b339828b2a42a5fda105ea84934957a7d23e35d
- https://github.com/emikulic/darkhttpd/compare/v1.14...v1.15
- http://www.openwall.com/lists/oss-security/2024/01/25/1
- https://github.com/emikulic/darkhttpd/commit/2b339828b2a42a5fda105ea84934957a7d23e35d
- https://github.com/emikulic/darkhttpd/compare/v1.14...v1.15