Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Debian 5.0 Lenny DSA-1856-1 Moderate: Mantis Information Leak

debian
Calendar Grey August 8, 2009
Debian Logo
Debian bulletin DSA-1897-2 concerns vulnerability in Asterisk software. Users are urged to update for system integrity.
It was discovered that the Debian Mantis package, a web based bug tracking system, installed the database credentials in a file with world-readable permissions onto the local files...

Summary

This updated package corrects this problem for new installations and
will carefully try to update existing ones. Administrators can check
the permissions of the file /etc/mantis/config_db.php to see if they
are safe for their environment.

The old stable distribution (etch) does not contain a mantis package.

For the stable distribution (lenny), this problem has been fixed in
version 1.1.6+dfsg-2lenny1.

For the unstable distribution (sid), this problem has been fixed in
version 1.1.8+dfsg-2.

We recommend that you upgrade your mantis package.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 5.0 ...

Read the Full Advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here