Package: webcalendar
Version: 0.9.45-4
Severity: normal
Tags: security

As written, the password used to access the webcalendar database is
world readable in /etc/webcalendar/settings.php.  This file should
probably be chowned to the www user/group and chmod 640.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to