Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 9 Aug 2013 17:16:58 +0000
From: "Christey, Steven M." <>
To: "" <>
Subject: RE: CVE request: nullmailer world readable


Out of curiosity, what types of sensitive information are contained in this file that cause world-readable permissions to pose a vulnerability?

- Steve

>-----Original Message-----
>From: Agostino Sarubbo []
>Sent: Friday, August 09, 2013 1:15 PM
>Subject: [oss-security] CVE request: nullmailer world readable
>On Gentoo, the file /etc/nullmailer/remotes is installed with wrong
>~ # ls -la /etc/nullmailer/remotes
>-rw-r--r-- 1 root root 971 Aug  9 18:58 /etc/nullmailer/remotes
>Nullmailer-1.11-r2 contains the fix, all prior versions are affected.
>Please assign a CVE.
>Agostino Sarubbo
>Gentoo Linux Developer

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.