Gentoo Linux Security Advisory GLSA 200408-09
https://security.gentoo.org/
Severity: Low
Title: Roundup filesystem access vulnerability
Date: August 11, 2004
Bugs: #53494
ID: 200408-09
Synopsis
=======
Roundup will make files owned by the user that it's running as
accessable to a remote attacker.
Background
=========
Roundup is a simple to use issue-tracking system with command-line,
web, and e-mail interfaces.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-www/roundup <= 0.6.4 >= 0.7.6
==========
Improper handling of a specially crafted URL allows access to the
server's filesystem, which could contain sensitive information.
Impact
=====
An attacker could view files owned by the user ...
style>.gentoo_availability{display:block;}
Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/3238725_4c9dbbdde36eef04251a4ced7eac4df9 on line 11
Get the latest Linux and open source security news straight to your inbox.