Package: ejabberd
Version: 1.1.2-5

The file which contains user passwords (/var/lib/ejabberd/passwd.DCD) is world 
readable and even if this file is a binary file, having a shell account on the 
ejabberd server permit to find password (passwords are clear in the file).




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to