vendor:
BubbleMon
by:
SecurityFocus
3.3
CVSS
MEDIUM
Open File Descriptor Leakage
255
CWE
Product Name: BubbleMon
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
BubbleMon Open File Descriptor Leakage
It has been reported that BubbleMon is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of kernel memory. It is allegedly possible for attackers to inherit the open file descriptors for /dev/mem and /dev/kmem by executing a malicious program through BubbleMon. The program that is executed can be specified by the attacker at the command line.
Mitigation:
Ensure that BubbleMon is not used in a production environment.
