[Secure-testing-team] Bug#637485: password in world-readable file (/etc/apache2/apache2.conf)

Ansgar Burchardt ansgar at debian.org
Thu Aug 11 23:31:55 UTC 2011


Package: src:dtc
Version: 0.32.10-2
Severity: serious
Tags: security upstream

Hi,

the setup script for dtc wrote a password for the MySQL user
"dtcdaemons" into the world readable file /etc/apache2/apache2.conf.

Ansgar





More information about the Secure-testing-team mailing list