[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    Re: [oss-security] CVE Request: icinga sample db creation scripts
From:       Kurt Seifried <kseifried () redhat ! com>
Date:       2012-07-30 17:06:41
Message-ID: 5016BF21.2080901 () redhat ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/30/2012 07:01 AM, Marcus Meissner wrote:
> Hi,
> 
> Icinga ships some sample DB creationscripts which give out too
> much privileges.
> 
> References: https://bugzilla.novell.com/show_bug.cgi?id=767319 
> https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab
>
> 
https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63
> 
> Reported by Lars Vogdt of SUSE via Tim Hardeck to Incinga.
> 
> Ciao, Marcus

Please use CVE-2012-3441 for this issue.


- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=M/mm
-----END PGP SIGNATURE-----
[prev in list] [next in list] [prev in thread] [next in thread]