[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1856 mantis -- information leak

ID: oval:org.mitre.oval:def:8093Date: (C)2009-12-15   (M)2019-11-22
Class: PATCHFamily: unix




It was discovered that the Debian Mantis package, a web based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local filesystem. This allows local users to acquire the credentials used to control the Mantis database. This updated package corrects this problem for new installations and will carefully try to update existing ones. Administrators can check the permissions of the file /etc/mantis/config_db.php to see if they are safe for their environment. The old stable distribution (etch) does not contain a mantis package.

Platform:
Debian 4.0
Product:
mantis
Reference:
DSA-1856
CPE    1
cpe:/o:debian:debian_linux:5.0

© SecPod Technologies