Package: mon
Version: 1.2.0-9
Severity: normal

The following mon.d/http_tppnp.monitor script uses /tmp/http_tppnp for a pipe by
default which is a potential security issue.  ~mon/http_tppnp would be a better 
option.


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.5.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages mon depends on:
ii  adduser              3.114
ii  libc6                2.22-9
ii  libtime-period-perl  1.20-8.2
ii  mon-client           1.2.0-2

Versions of packages mon recommends:
pn  fping                            <none>
pn  libauthen-pam-perl               <none>
pn  libcrypt-ssleay-perl             <none>
ii  libfilesys-diskspace-perl        0.05-16.2
ii  libnet-dns-perl                  1.05-2
pn  libnet-ldap-perl                 <none>
pn  libnet-telnet-perl               <none>
pn  libsnmp-perl                     <none>
pn  libstatistics-descriptive-perl   <none>
pn  libtime-parsedate-perl           <none>
ii  perl-modules-5.22 [libnet-perl]  5.22.2-1

Versions of packages mon suggests:
ii  mon-contrib  1.0+dfsg-3

-- Configuration Files:
/etc/mon/mon.cf changed [not included]

-- no debconf information

Reply via email to