Your message dated Sun, 10 Jul 2005 21:42:08 +0200
with message-id <[EMAIL PROTECTED]>
and subject line closing bug
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 15 May 2005 21:31:59 +0000
>From [EMAIL PROTECTED] Sun May 15 14:31:58 2005
Return-path: <[EMAIL PROTECTED]>
Received: from pfepb.post.tele.dk [195.41.46.236]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DXQiM-0007dC-00; Sun, 15 May 2005 14:31:58 -0700
Received: from [127.0.0.1] (0x535c9dd8.abnxx12.adsl-dhcp.tele.dk
[83.92.157.216])
by pfepb.post.tele.dk (Postfix) with ESMTP id 912155EE01D;
Sun, 15 May 2005 23:31:54 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "Mads Chr. Olesen" <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: gnome-gv: queries DNS-servers about local filenames
X-Mailer: reportbug 3.8
Date: Sun, 15 May 2005 23:31:54 +0200
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: gnome-gv
Version: 1:2.8.2-3
Severity: grave
Tags: security
Justification: user security hole
When ggv is started, a lot of network traffic can be seen. When viewed
with ethereal, it can be seen that many DNS-queries are made, to domains
that resemble document-names from the local system, e.g.:
"Standard query AAAA ckend_programming.pdf" (quote Ethereal)
....it then goes on to try other DNS servers and local domain names from
/etc/resolv.conf
Other examples of queries made are:
"Standard query AAAA 1a_opg5-2.pdf" (I have had a document called
"Ma1a_opg5-2.pdf")
"Standard query AAAA ut_quickstart-22-07-2004_17-18-01.sxw"
I have a document on my desktop called "backend_programming.pdf", but
besides that I can't see where the filenames come from - they are all
documents I have opened at some point in time, missing the first few
letters. Whether I have had them all opened with ggv, I don't know. Some
file-names are .gif, some .pdf, some .sxw, some .zip.
It could be a misconfiguration, since I run Gnome 2.10 from
experimental, and my installation has been upgraded from the "woody"
days. Please write back, if you need further information.
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (600, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.9
Locale: LANG=da_DK, LC_CTYPE=da_DK (charmap=ISO-8859-1)
Versions of packages gnome-gv depends on:
ii desktop-file-utils 0.10-1 Utilities for .desktop files
ii gconf2 2.10.0-1 GNOME configuration database syste
ii gs 8.01-5 Transitional package
ii gs-esp [gs] 7.07.1-9 The Ghostscript PostScript interpr
ii gs-gpl [gs] 8.01-5 The GPL Ghostscript PostScript int
ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi
ii libatk1.0-0 1.9.0-1 The ATK accessibility toolkit
ii libaudiofile0 0.2.6-6 Open-source version of SGI's audio
ii libbonobo2-0 2.8.1-2 Bonobo CORBA interfaces library
ii libbonoboui2-0 2.8.1-2 The Bonobo UI library
ii libc6 2.3.4-3 GNU C Library: Shared libraries an
ii libesd0 0.2.35-2 Enlightened Sound Daemon - Shared
ii libgconf2-4 2.10.0-1 GNOME configuration database syste
ii libgcrypt11 1.2.0-4 LGPL Crypto library - runtime libr
ii libglib2.0-0 2.6.4-1 The GLib library of C routines
ii libgnome-keyring0 0.4.2-1 GNOME keyring services library
ii libgnome2-0 2.10.0-1 The GNOME 2 library - runtime file
ii libgnomecanvas2-0 2.8.0-1 A powerful object-oriented display
ii libgnomeui-0 2.10.0-1 The GNOME 2 libraries (User Interf
ii libgnomevfs2-0 2.10.0-1 The GNOME virtual file-system libr
ii libgnutls11 1.0.16-9 GNU TLS library - runtime library
ii libgpg-error0 1.0-1 library for common error values an
ii libgtk2.0-0 2.6.4-1 The GTK+ graphical user interface
ii libice6 4.3.0.dfsg.1-12.0.1 Inter-Client Exchange library
ii libjpeg62 6b-9 The Independent JPEG Group's JPEG
ii liborbit2 1:2.12.2-1 libraries for ORBit2 - a CORBA ORB
ii libpango1.0-0 1.8.1-1 Layout and rendering of internatio
ii libpopt0 1.7-5 lib for parsing cmdline parameters
ii libsm6 4.3.0.dfsg.1-12.0.1 X Window System Session Management
ii libtasn1-2 0.2.10-4 Manage ASN.1 structures (runtime)
ii libx11-6 4.3.0.dfsg.1-12.0.1 X Window System protocol client li
ii libxml2 2.6.16-7 GNOME XML library
ii scrollkeeper 0.3.14-10 A free electronic cataloging syste
ii xlibs 4.3.0.dfsg.1-12 X Keyboard Extension (XKB) configu
ii zlib1g 1:1.2.2-4 compression library - runtime
-- no debconf information
---------------------------------------
Received: (at 309243-done) by bugs.debian.org; 10 Jul 2005 19:42:11 +0000
>From [EMAIL PROTECTED] Sun Jul 10 12:42:11 2005
Return-path: <[EMAIL PROTECTED]>
Received: from gate.lathspell.de (app109.intern) [212.117.68.82]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Drhgo-0004ne-00; Sun, 10 Jul 2005 12:42:11 -0700
Received: by app109.intern (Postfix, from userid 1000)
id 72CBC2C5F3; Sun, 10 Jul 2005 21:42:08 +0200 (CEST)
Date: Sun, 10 Jul 2005 21:42:08 +0200
From: Christian Hammers <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: closing bug
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
as it was unreproducible and got no more user input.
bye,
-christian-
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
