aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2005-09-28 01:53:31 +0000
committerMatthias Andree <matthias.andree@gmx.de>2005-09-28 01:53:31 +0000
commit2b45452bfccff6a3c219e3f9cdd57f48d62a3a1c (patch)
tree73b617b962891c5d5b2fb6c293472dfe9678bb6e
parent46cd99f9d09f411f270b074d8274e534775ec468 (diff)
downloadfetchmail-2b45452bfccff6a3c219e3f9cdd57f48d62a3a1c.tar.gz
fetchmail-2b45452bfccff6a3c219e3f9cdd57f48d62a3a1c.tar.bz2
fetchmail-2b45452bfccff6a3c219e3f9cdd57f48d62a3a1c.zip
Revise Impact/Danger headers.
svn path=/trunk/; revision=4354
-rw-r--r--fetchmail-SA-2005-02.txt7
1 files changed, 3 insertions, 4 deletions
diff --git a/fetchmail-SA-2005-02.txt b/fetchmail-SA-2005-02.txt
index a6a068bb..d5619240 100644
--- a/fetchmail-SA-2005-02.txt
+++ b/fetchmail-SA-2005-02.txt
@@ -6,10 +6,9 @@ Author: Matthias Andree
Version: 1.00
Announced: 2005-XX-XX
Type: insecure creation of file
-Impact: passwords can be world readable if the run control file
- is larger than Python default write buffer
-Danger: low: only happens on large files and the time window
- during which the passwords are exposed is small.
+Impact: passwords are written to a world-readable file
+Danger: low: the time window during which the passwords are
+ readable is small.
CVE Name: CAN-2005-XXXX
URL: http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt