Bug#711987: ucarp: password exposure

[thoralf]

Package: ucarp
Version: 1.5.2-1+nmu1
Severity: normal

foo.


-- System Information:
Debian Release: 7.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ucarp depends on:
ii  ifupdown    0.7.8
ii  libc6       2.13-38
ii  libpcap0.8  1.3.0-1

Versions of packages ucarp recommends:
ii  iproute  20120521-3+b3

ucarp suggests no packages.

-- Configuration Files:
/etc/network/if-up.d/ucarp changed:
UCARP=/usr/sbin/ucarp
EXTRA_PARAMS=""
PASS=""
if [ ! -x $UCARP ]; then
    exit 0
fi
if [ -z "$IF_UCARP_UPSCRIPT" ]; then
    IF_UCARP_UPSCRIPT=/usr/share/ucarp/vip-up
fi
if [ -z "$IF_UCARP_DOWNSCRIPT" ]; then
    IF_UCARP_DOWNSCRIPT=/usr/share/ucarp/vip-down
fi
if [ -n "$IF_UCARP_MASTER" ]; then
    if ! expr "$IF_UCARP_MASTER" : "no\|off\|false\|0" > /dev/null; then
        EXTRA_PARAMS="-P"
    fi
fi
if [ -n "$IF_UCARP_ADVSKEW" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -k $IF_UCARP_ADVSKEW"
fi
if [ -n "$IF_UCARP_ADVBASE" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -b $IF_UCARP_ADVBASE"
fi
if [ -n "$IF_UCARP_DEADRATIO" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -r $IF_UCARP_DEADRATIO"
fi
if [ -n "$IF_UCARP_NOMCAST" ]; then
    if ! expr "$IF_UCARP_NOMCAST" : "no\|off\|false\|0" > /dev/null; then
        EXTRA_PARAMS="$EXTRA_PARAMS -M"
    fi
fi
if [ -n "$IF_UCARP_XPARAM" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -x $IF_UCARP_XPARAM"
fi
if [ -n "$IF_UCARP_PASSWORD" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -p $IF_UCARP_PASSWORD"
    PASS=yes
fi
    
if [ -n "$IF_UCARP_PASSFILE" ]; then
    EXTRA_PARAMS="$EXTRA_PARAMS -o $IF_UCARP_PASSFILE"
    PASS=yes
fi
    
if [ -n "$IF_UCARP_VID" -a -n "$IF_UCARP_VIP" -a -n "$PASS" ]; then
    $UCARP -i $IFACE -s $IF_ADDRESS -B -z -v $IF_UCARP_VID -a $IF_UCARP_VIP \
        -u $IF_UCARP_UPSCRIPT -d $IF_UCARP_DOWNSCRIPT $EXTRA_PARAMS
fi


-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org