data/DTSA/advs/32-bcfg2.adv


1
2
3
4
5
6
7
8
9
10
11
12
13
14

source: bcfg2
date: February 1st, 2007
author: Neil McGovern
vuln-type: programming error
problem-scope: local
debian-specifc: yes
testing-fix: 0.8.6.1-1.1etch1
sid-fix: 0.8.7.3-1
upgrade: apt-get install bcfg2

Incorrect permissions for the bcfg2 configuration file could lead to password
disclosure to unprivileged users.

Please note that bcfg2 is not present in sarge.