[Secure-testing-team] Bug#616310: [phpmyadmin] Please do not broadcast the existance of phpadmin with avahi

Bastien ROUCARIES roucaries.bastien at gmail.com
Thu Mar 3 11:56:35 UTC 2011


Package: phpmyadmin
Version: 4:3.3.9.2-1
Severity: important
Tags: security
X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org


phpmyadmin installed with avahi-daemon broadcast the phpmyadmin adress by installing a /etc/avahi/services

Please do not do service discovery without admin request

Bastien





More information about the Secure-testing-team mailing list