Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
91
security advisorygentoolocal accessGentoo: GLSA 201101-07 Normal: Prewikka Password Disclosure
Due to a world-readable file, a local attacker can obtain the SQL database password used by Prewikka.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201101-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Prewikka: password disclosure Date: January 16, 2011 Bugs: #270056 ID: 201101-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Due to a world-readable file, a local attacker can obtain the SQL database password used by Prewikka. Background ========= Prewikka is a graphical front-end analysis console for the Prelude Hybrid IDS Framework. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/prewikka < 0.9.14-r2 > = 0.9.14-r2 Description ========== The permissions of the prewikka.conf file are set world readable. Impact ===== A local attacker could obtain the SQL database password used by Prewikka. Workaround ========= There is no known workaround at this time. Resolution ========= All Prewikka users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-analyzer/prewikka-0.9.14-r2" NOTE: This is a legacy GLSA. Updates for all affected architectures are available since May 18, 2009 . It is likely that your system is already no longer affected by this issue. References ========= [ 1 ] CVE-2010-2058 https://www.cve.org/CVERecord?id=CVE-2010-2058 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201101-07 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Jan 16, 2011
Gentoo
89
security advisoryupdateFedoraFedora 10: FEDORA-2009-3761 High: Prewikka Permissions Issue
The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-3761 2009-04-21 23:54:49 -------------------------------------------------------------------------------- Name : prewikka Product : Fedora 10 Version : 0.9.14 Release : 2.fc10 URL : https://prelude-ids.org/ Summary : Graphical front-end analysis console for the Prelude Hybrid IDS Framework Description : Prewikka is a graphical front-end analysis console for the Prelude Hybrid IDS Framework. Providing numerous features, Prewikka facilitates the work of users and analysts. It provides alert aggregation and sensor and hearbeat views, and has user management and configurable filters. It has access to external tools such as whois and traceroute. Please read README.fedora for installation instructions. -------------------------------------------------------------------------------- Update Information: The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2009 Steve Grubb 0.9.14-2 - Change default perms on conf file -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update prewikka' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Apr 27, 2009
•Important
Fedora
89
security advisorymoderatefedoraFedora 9 FEDORA-2009-3789 Moderate: Prewikka Permissions Issue
The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-3789 2009-04-21 23:55:14 -------------------------------------------------------------------------------- Name : prewikka Product : Fedora 9 Version : 0.9.14 Release : 2.fc9 URL : https://prelude-ids.org/ Summary : Graphical front-end analysis console for the Prelude Hybrid IDS Framework Description : Prewikka is a graphical front-end analysis console for the Prelude Hybrid IDS Framework. Providing numerous features, Prewikka facilitates the work of users and analysts. It provides alert aggregation and sensor and hearbeat views, and has user management and configurable filters. It has access to external tools such as whois and traceroute. Please read README.fedora for installation instructions. -------------------------------------------------------------------------------- Update Information: The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group. -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2009 Steve Grubb 0.9.14-2 - Change default perms on conf file * Thu Apr 24 2008 Steve Grubb 0.9.14-1 - new upstream release -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update prewikka' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Apr 27, 2009
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!