diff options
| author | miwi <miwi@FreeBSD.org> | 2008-03-10 18:41:23 +0800 |
|---|---|---|
| committer | miwi <miwi@FreeBSD.org> | 2008-03-10 18:41:23 +0800 |
| commit | 6dfdd90fa0ac07af228032c1cb8704de4a636e6d (patch) | |
| tree | aa5ce967a725a133df9ec9265eaeb852132e918d /security | |
| parent | 8f0b4487e88b30e43718fb63dc1f8b3eb3cd8683 (diff) | |
| download | freebsd-ports-gnome-6dfdd90fa0ac07af228032c1cb8704de4a636e6d.tar.gz freebsd-ports-gnome-6dfdd90fa0ac07af228032c1cb8704de4a636e6d.tar.zst freebsd-ports-gnome-6dfdd90fa0ac07af228032c1cb8704de4a636e6d.zip | |
- Fix previous commit
* sort
* more reference
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 6f7155521540..3c592fd136bd 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -35,7 +35,7 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> <vuln vid="b39bdc06-ee42-11dc-8678-00a0cce0781e"> - <topic>dovecot -- security hole in blocking passdbs </topic> + <topic>dovecot -- security hole in blocking passdbs</topic> <affects> <package> <name>dovecot</name> @@ -47,16 +47,17 @@ Note: Please add new entries to the beginning of this file. <p>Dovecot reports:</p> <blockquote cite="http://dovecot.org/list/dovecot-news/2008-March/000065.html"> <p>Security hole in blocking passdbs (MySQL always. PAM, passwd - and shadow if blocking=yes) where user could specify extra - fields in the password. The main problem here is when specifying + and shadow if blocking=yes) where user could specify extra + fields in the password. The main problem here is when specifying "skip_password_check" introduced in v1.0.11 for fixing master user - logins, allowing the user to log in as anyone without a valid password. - </p> + logins, allowing the user to log in as anyone without a valid + password.</p> </blockquote> </body> </description> <references> <url>http://dovecot.org/list/dovecot-news/2008-March/000065.html</url> + <url>http://secunia.com/advisories/29295/</url> </references> <dates> <discovery>2008-03-09</discovery> |