oss-sec mailing list archives

CVE request: monkeyd world-readable logdir

From: Agostino Sarubbo <ago () gentoo org>
Date: Sun, 24 Feb 2013 20:00:57 +0100

Monkeyd, a small, fast, and scalable web server, produces, at least on gentoo 
a world-readable log.

# ls /var/log/monkeyd/master.log -la
-rw-r--r-- 1 root root 0 Feb 24 19:56 /var/log/monkeyd/master.log

Upstream site: http://www.monkey-project.com/

-- 
Agostino Sarubbo
Gentoo Linux Developer

Current thread:

CVE request: monkeyd world-readable logdir Agostino Sarubbo (Feb 24)
- Re: CVE request: monkeyd world-readable logdir Kurt Seifried (Feb 25)
  - Re: CVE request: monkeyd world-readable logdir Agostino Sarubbo (Feb 26)
  - Re: CVE request: monkeyd world-readable logdir Moritz Muehlenhoff (Feb 26)
    - Re: CVE request: monkeyd world-readable logdir Kurt Seifried (Feb 26)