Skip site navigation (1) Skip section navigation (2)

Re: [security issue] cvs is writtable by everyone.

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Ducrot Bruno <ducrot(at)echo(dot)fr>
Cc: pgsql-committers(at)postgresql(dot)org
Subject: Re: [security issue] cvs is writtable by everyone.
Date: 2001-09-03 20:59:40
Message-ID: 200109032059.f83Kxe121441@candle.pha.pa.us (view raw or flat)
Thread:
Lists: pgsql-committers
In case you haven't heard, we have reconfigured CVS and changed all the
passwords. Thanks for the info.

> Hello.
> 
> I found a mis-configuration on your CVS server.
> The passwd file in the CVSROOT is maintened by CVS !
> 
> a single:
> cvs -z3 -d :pserver:anoncvs(at)postgresql(dot)org:/home/projects/pgsql/cvsroot co CVSROOT
> 
> and anybody can have the passwd file.
> 
> As a proof, I have modified the CVSROOT/loginfo and commited back.
> 
> 
> -- 
> Ducrot Bruno
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo(at)postgresql(dot)org
> 

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026

In response to

pgsql-committers by date

Next:From: Marc G. FournierDate: 2001-09-03 21:17:53
Subject: pgsql/doc/TODO.detail java
Previous:From: Tom LaneDate: 2001-09-03 19:11:43
Subject: Re: pgsql/ oc/FAQ_SCO oc/Makefile oc/src/Makefile ...

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group