Bug#683320: [Pkg-nagios-devel] Bug#683320: CVE-2012-3441: insecure permissions in DB creation scripts

2012-08-30 Thread Moritz Muehlenhoff
severity 683320 normal thanks On Mon, Jul 30, 2012 at 09:09:50PM +0200, Alexander Wirt wrote: On Mon, 30 Jul 2012, Yves-Alexis Perez wrote: Source: icinga Severity: grave Tags: security Justification: user security hole Hi, DB creation scripts shipped in icinga-idoutils are

Bug#683320: [Pkg-nagios-devel] Bug#683320: CVE-2012-3441: insecure permissions in DB creation scripts

2012-07-30 Thread Alexander Wirt
On Mon, 30 Jul 2012, Yves-Alexis Perez wrote: Source: icinga Severity: grave Tags: security Justification: user security hole Hi, DB creation scripts shipped in icinga-idoutils are insecure (they grant privileges for all users). See https://bugzilla.novell.com/show_bug.cgi?id=767319