[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110507

 
 

909

 
 

86504

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1856 mantis -- information leak

ID: oval:org.mitre.oval:def:8093Date: (C)2009-12-15   (M)2017-11-18
Class: PATCHFamily: unix




It was discovered that the Debian Mantis package, a web based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local filesystem. This allows local users to acquire the credentials used to control the Mantis database. This updated package corrects this problem for new installations and will carefully try to update existing ones. Administrators can check the permissions of the file /etc/mantis/config_db.php to see if they are safe for their environment. The old stable distribution (etch) does not contain a mantis package.

Platform:
Debian 4.0
Product:
mantis
Reference:
DSA-1856
CPE    1
cpe:/o:debian:debian_linux:5.0

© SecPod Technologies