Package: postgresl-8.0
Version: 8.0.2-1
Severity: grave
Tags: security
Justification: user security hole
The server creates a socket in /tmp, which is unsafe. Any local user
can create a similar socket and impersonate the database server.
This bug also breaks backwards comaptibility with old
Processing commands for [EMAIL PROTECTED]:
reassign 308597 postgresql-8.0
Bug#308597: postgresl-8.0: server socket created in /tmp
Warning: Unknown package 'postgresl-8.0'
Bug reassigned from package `postgresl-8.0' to `postgresql-8.0'.
thanks
Stopping processing here.
Please contact me
2 matches
Mail list logo