Date: Sat, 8 Sep 2001 03:48:49 -0700 (PDT) From: Peter Pentchev <roam@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/mail/vpopmail Makefile Message-ID: <200109081048.f88AmoE46215@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
roam 2001/09/08 03:48:49 PDT
Modified files:
mail/vpopmail Makefile
Log:
Turn off world-readability on the directories holding the executable
binaries and libraries of vpopmail. This prevents arbitrary users
from obtaining the username and password for access to the MySQL database,
which are present in plaintext in the vpopmail object files and binaries.
Obtained from: Bugtraq
Revision Changes Path
1.12 +4 -1 ports/mail/vpopmail/Makefile
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200109081048.f88AmoE46215>