Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X.Org X Server "X:1 -sp"命令 信息泄露漏洞
Vulnerability Description
Xorg X Server是Solaris x86平台上可用的X窗口系统显示服务器之一。 X Server的执行程序在处理参数数据时存在漏洞,本地攻击者可能利用此漏洞获取系统文件相关的敏感信息。 在执行X时处理安全策略参数的方式存在漏洞,允许远程攻击者通过向X -sp命令传送文件名参数判断是否存在文件。如果在X :1 -sp <file>命令中提供了任意文件或目录的话,但用户得到的返回为"error opening security policy file <file>",则系统中不存在文件或目录;如果返
CVSS Information
N/A
Vulnerability Type
N/A