Bug#369542: security problem in ssmtp package (password exposure)

2006-12-12 Thread Michelle Konzack
According to this Bugreport, it would be better, IF the behaviour of -v stay as it is, but preventing the output of the base64 password IF the UID is != 0. Otherwise a Systemadministrator can run into trouble while debuging errors. Thanks, Greetings and nice Day Michelle Konzack

Bug#369542: security problem in ssmtp package (password exposure)

2006-12-04 Thread Andreas Barth
* Julien Louis ([EMAIL PROTECTED]) [061203 05:35]: An updated patch, which applies cleanly, is attached. Here, compilation stops with: gcc -DSTDC_HEADERS=1 -DHAVE_LIMITS_H=1 -DHAVE_STRINGS_H=1 -DHAVE_SYSLOG_H=1 -DHAVE_UNISTD_H=1 -DHAVE_LIBNSL=1 -DRETSIGTYPE=void -DHAVE_VPRINTF=1

Bug#369542: security problem in ssmtp package (password exposure)

2006-12-04 Thread Andreas Barth
* Julien Louis ([EMAIL PROTECTED]) [061204 13:40]: On Mon, Dec 04, 2006 at 12:08:52PM +0100, Andreas Barth wrote: * Julien Louis ([EMAIL PROTECTED]) [061203 05:35]: ssmtp.c: In function 'ssmtp': ssmtp.c:1409: error: 'boot_t' undeclared (first use in this function) ssmtp.c:1409: error:

Bug#369542: security problem in ssmtp package (password exposure)

2006-12-03 Thread Julien Louis
tags 36942 + patch thanks On Sat, Dec 02, 2006 at 04:35:41PM +0100, Andreas Barth wrote: unfortunatly, this patch doesn't apply cleanly in Debian. An updated patch, which applies cleanly, is attached. Cheers -- ca y est j'ai acheté mandrake a la fnac je vais devenir UN LINUX

Bug#369542: security problem in ssmtp package (password exposure)

2006-12-02 Thread Andreas Barth
tags 369542 - patch thanks * Ben XO ([EMAIL PROTECTED]) [060530 08:08]: --- ssmtp-2.61/ssmtp.c 2004-07-23 06:58:48.0 +0100 +++ ssmtp-2.61+auth_login_minus_v_patch/ssmtp.c 2006-05-05 20:26:07.0 +0100 @@ -1281,6 +1281,7 @@ struct passwd *pw; int i, sock;

Bug#369542: security problem in ssmtp package (password exposure)

2006-05-30 Thread Ben XO
Package: ssmtp Version: 2.61 PREFACE: As I am a Gentoo Linux user, I first reported this to the Gentoo team about 1 month ago. As yet nothing's happened, so I'm reporting it upstream as well. The Gentoo bug URL is https://bugs.gentoo.org/show_bug.cgi?id=132376 Here is a copy of the bug