Package: prosody
Version: 0.6.1-1
Severity: serious

I installed prosody and used prosodyctl to add a user. 

-rw-rw-rw- 1 prosody prosody   36 Dec 19 13:47 joey.dat

This is the result. The password is in cleartext, so insecure.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.31-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages prosody depends on:
ii  adduser                       3.111      add and remove users and groups
ii  libc6                         2.10.2-2   GNU C Library: Shared libraries
ii  libidn11                      1.15-2     GNU Libidn library, implementation
ii  liblua5.1-0                   5.1.4-5    Simple, extensible, embeddable pro
ii  liblua5.1-expat0              1.1.0-3    libexpat bindings for the Lua lang
ii  liblua5.1-filesystem0         1.4.2-2    luafilesystem library for the Lua 
ii  liblua5.1-socket2             2.0.2-4    TCP/UDP socket library for Lua 5.1
ii  libssl0.9.8                   0.9.8k-7   SSL shared libraries
ii  lua5.1                        5.1.4-5    Simple, extensible, embeddable pro
ii  openssl                       0.9.8k-7   Secure Socket Layer (SSL) binary a

Versions of packages prosody recommends:
ii  liblua5.1-sec1                0.4-3      SSL socket library for the Lua lan

prosody suggests no packages.

-- no debconf information

-- 
see shy jo



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to