Package: clamav-freshclam
Version: 0.83-5
Severity: important

During install freshclam.conf is written; including proxy configuration if
needed. The Proxy string is stored in freshclam.conf but permissions allow
group and others to read freshclam.conf hence to get the proxy password which
could even be a real users password.

Best regards,

Alexander Mader.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages clamav-freshclam depends on:
ii  clamav-base                 0.83-5       base package for clamav, an anti-v
ii  debconf [debconf-2.0]       1.4.30.13    Debian configuration management sy
ii  debianutils                 2.8.4        Miscellaneous utilities specific t
ii  libbz2-1.0                  1.0.2-5      high-quality block-sorting file co
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libclamav1                  0.83-5       virus scanner library
ii  libcurl3                    7.13.1-2     Multi-protocol file transfer libra
ii  libgmp3                     4.1.4-5      Multiprecision arithmetic library
ii  libidn11                    0.5.13-1.0   GNU libidn library, implementation
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  logrotate                   3.7-2        Log rotation utility
ii  ucf                         1.17         Update Configuration File: preserv
ii  zlib1g                      1:1.2.2-3    compression library - runtime

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to