[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#356285: apache2-utils: add note to manpage that htpasswd is not safe for setuid/sudo



Package: apache2-utils
Version: 2.0.55-4
Severity: wishlist

As a followup to CVE-2006-1078 and CVE-2006-1079:

This note from the htpasswd source:

"NOTE! This program is not safe as a setuid executable!  Do not make it
setuid!"

should also be in the man page.



Reply to: