[Secure-testing-team] Bug#637485: password in world-readable file (/etc/apache2/apache2.conf)
Ansgar Burchardt
ansgar at debian.org
Thu Aug 11 23:31:55 UTC 2011
Package: src:dtc
Version: 0.32.10-2
Severity: serious
Tags: security upstream
Hi,
the setup script for dtc wrote a password for the MySQL user
"dtcdaemons" into the world readable file /etc/apache2/apache2.conf.
Ansgar
More information about the Secure-testing-team
mailing list