Detections
Analytics

Debian DSA-555-1 : freenet6 - wrong file permissions

low Nessus Plugin ID 15653

Synopsis

The remote Debian host is missing a security-related update.

Description

Simon Josefsson noticed that the tspc.conf configuration file in freenet6, a client to configure an IPv6 tunnel to freenet6.net, is set world readable. This file can contain the username and the password used to contact the IPv6 tunnelbroker freenet6.net.

Solution

Upgrade the freenet6 package.

For the stable distribution (woody) this problem has been fixed in version 0.9.6-1woody2.

See Also

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=254709

http://www.debian.org/security/2004/dsa-555

Plugin Details

Severity: Low

ID: 15653

File Name: debian_DSA-555.nasl

Version: 1.19

Type: local

Agent: unix

Published: 11/10/2004

Updated: 1/4/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.7

CVSS v2

Risk Factor: Low

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:freenet6, cpe:/o:debian:debian_linux:3.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 9/30/2004

Vulnerability Publication Date: 9/30/2004

Reference Information

CVE: CVE-2004-0563

DSA: 555