Bug#298929: Security problem in distcc

2005-03-18 Thread Frank Lichtenheld
severity #298929 important thanks On Sun, Mar 13, 2005 at 08:10:49AM +0100, Martin Schulze wrote: > Martin Pool wrote: > > I don't think there is any new information in this report beyond what > > has been on the web site for many months. distcc is secure when used as > > directed. > > If this r

Processed: Re: Bug#298929: Security problem in distcc

2005-03-18 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > severity #298929 important Bug#298929: Security problem in distcc Severity set to `important'. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bu

Bug#298929: Security problem in distcc

2005-03-12 Thread Martin Schulze
Martin Pool wrote: > Hi Frank, Martin, > > I don't think there is any new information in this report beyond what > has been on the web site for many months. distcc is secure when used as > directed. If this report is irrelevant for Debian, feel free to close it right away. Regards, Joe

Bug#298929: Security problem in distcc

2005-03-12 Thread Martin Pool
Hi Frank, Martin, I don't think there is any new information in this report beyond what has been on the web site for many months. distcc is secure when used as directed. I agree Apple should upgrade, but that is irrelevant to debian and beyond my control. For reasons that ought to be obvious, mere

Bug#298929: Security problem in distcc

2005-03-12 Thread Frank Lichtenheld
On Thu, Mar 10, 2005 at 07:30:31PM +0100, Martin Schulze wrote: > Exploit: > > There are a few known exploits for distcc. By using a common method > provided by metasploit (http://metasploit.com/projects/Framework/ > exploits.html#distcc_exec), I was given full access to the remote users > home fo

Bug#298929: Security problem in distcc

2005-03-10 Thread Martin Schulze
Package: distcc Version: 2.18.1-5 Severity: grave Tags: sarge sid security Saw this on bugtraq: XCode ships with version 2.0.1 of distcc. We also tried updating to 2.18.3 and had similar issues with that version as well. Apple was not contacted prior to this release because the exploit for distcc