[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1856 mantis -- information leak

ID: oval:org.mitre.oval:def:8093Date: (C)2009-12-15   (M)2015-06-19
Class: PATCHFamily: unix




It was discovered that the Debian Mantis package, a web based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local filesystem. This allows local users to acquire the credentials used to control the Mantis database. This updated package corrects this problem for new installations and will carefully try to update existing ones. Administrators can check the permissions of the file /etc/mantis/config_db.php to see if they are safe for their environment. The old stable distribution (etch) does not contain a mantis package.

Platform:
Debian 4.0
Product:
mantis
Reference:
DSA-1856
CPE    1
cpe:/o:debian:debian_linux:5.0

© 2013 SecPod Technologies