Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

prewikka: password leak

Package(s):

prewikka

CVE #(s):

CVE-2010-2058

Created:

January 17, 2011

Updated:

January 19, 2011

Description:

From the CVE entry:

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Alerts:

Gentoo

2011-01-16

(Log in to post comments)