Bug#305142: CAN-2005-2214: insegure apt-setup

[Martin Schulze <joey@infodrom.org>]

severity 305142 important
tags 305142 security
thanks

Is there any motion on this problem?

======================================================
Candidate: CAN-2005-2214
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2214
Final-Decision:
Interim-Decision:
Modified:
Proposed:
Assigned: 20050712
Category: SF
Reference: MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142
Reference: SECUNIA:15955
Reference: URL:http://secunia.com/advisories/15955

apt-setup in Debian GNU/Linux installs the apt.conf file with insecure
permissions, which allows local users to obtain sensitive information
such as passwords.


Regards,

	Joey

-- 
Have you ever noticed that "General Public Licence" contains the word "Pub"?

Please always Cc to me when replying to me on the lists.