Bug#318712: tattle.pl
Please note that there have been security issues in tattle versions
before 0.3.0 as reported by b0iler on Bugtraq [1].
An updated release of tattle which fixes this issue is available on the
new website [2] of its developer, Mr. C.J. Steele.
Though much has been improved since the initial release, some
shortcomings remain in the current 0.4.0 release ([3], [4], script does
not define default variable values outside of its configuration section).
Nevertheless tattle would make a nice addition to the Debian pool,
though, preferrably, as a standalone package. A recommendation to
install it could be added to the openssh-server dependencies once it is
generally considered both reliable and using a good reporting approach.
I thus recommend to reassign this a bug against wnpp twice, once with
title 'tattle', once with title 'never seen before' (if still of interest).
Moritz
[1]
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html
[2] http://intertrusion.com/files/tattle
[3]
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0059.html
[4]
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0061.html
Reply to: