| Summary: | www-servers/skunkweb: world-readable logdir | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED WONTFIX | ||
| Severity: | minor | CC: | python |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.openwall.com/lists/oss-security/2013/02/24/4 | ||
| Whiteboard: | B4 [removal] | ||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 451790 | ||
| Bug Blocks: | |||
This package is too old to be fixed and has been masked for removal by the Python team. See bug 451790. Security, you can close this bug after the removal. This package has been removed from the tree. See bug 451790. |
From ${URL} : skunkweb, a robust Python web application server, produces a world-readable log. # ls -la /var/log/skunkweb/sw.log -rw-r--r-- 1 skunkweb skunkweb 4529 Feb 24 19:41 /var/log/skunkweb/sw.log The development seems dead. Upstream site: http://skunkweb.sourceforge.net/