Prewikka weak permissions
Published:		18.01.2011
Source:		BUGTRAQ
SecurityVulns ID:		11354
Type:		local
Level:		5/10
Description:		Weak permission for configuration file with database password.

Affected:		PREWIKKA : Prewikka 0.9
CVE:		CVE-2010-2058 (setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.)

Original document

GENTOO, [ GLSA 201101-07 ] Prewikka: password disclosure (18.01.2011)

Discuss:

Read or add your comments to this news (0 comments)