Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: FEDORA-2009-3761 High: Prewikka Permissions Issue

fedora
Calendar Grey April 27, 2009
Dist Fedora Esm H88
Fix addresses the problem of publicly accessible prewikka.conf file exposing sensitive database login information.
The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka

Summary

Prewikka is a graphical front-end analysis console for the Prelude

Hybrid IDS Framework. Providing numerous features, Prewikka facilitates

the work of users and analysts. It provides alert aggregation and sensor

and hearbeat views, and has user management and configurable filters. It

has access to external tools such as whois and traceroute.

Please read README.fedora for installation instructions.

Update Information:

The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group.

Topics%20covered

Topics Covered

security advisory update Fedora permissions sensitive data prewikka

Change Log

* Fri Apr 17 2009 Steve Grubb 0.9.14-2 - Change default perms on conf file

References

Fedora Update Notification FEDORA-2009-3761 2009-04-21 23:54:49
Name : prewikka Product : Fedora 10 Version : 0.9.14 Release : 2.fc10 URL : https://prelude-ids.org/ Summary : Graphical front-end analysis console for the Prelude Hybrid IDS Framework Description : Prewikka is a graphical front-end analysis console for the Prelude Hybrid IDS Framework. Providing numerous features, Prewikka facilitates the work of users and analysts. It provides alert aggregation and sensor and hearbeat views, and has user management and configurable filters. It has access to external tools such as whois and traceroute.
Please read README.fedora for installation instructions.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update prewikka' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: prewikka
Product: Fedora 10
Version: 0.9.14
Release: 2.fc10
URL: https://prelude-ids.org/
Summary: Graphical front-end analysis console for the Prelude Hybrid IDS Framework

Topics%20covered

Topics Covered

security advisory update Fedora permissions sensitive data prewikka

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here