Re: Responsible Vulnerability Disclosure

From	Dan Ritter <dsr@randomstring.org>
Newsgroups	linux.debian.user
Subject	Re: Responsible Vulnerability Disclosure
Date	2020-08-10 17:30 +0200
Message-ID	<AChUm-7OU-7@gated-at.bofh.it> (permalink)
References	<AChAZ-7Ia-13@gated-at.bofh.it> <AChAZ-7Ia-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Parshwa Bhavsar wrote: 
> Hello there,
> 
> Is there any update on this?
> 
> > Description :-
> >
> > A malicious user can have access to some admin data through this
> > vulnerability.
> > This vulnerability is also called "Directory Listening".
> >
> >
> > Vulnerable URL :-
> >
> > http://ftp.debian.org/debian/pool/main/n/nautilus-admin/

That's not an administrative system. That's software
distribution, for a package called "nautilus-admin".

There's no security impact here. 

-dsr-

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: Responsible Vulnerability Disclosure Parshwa Bhavsar <parshwabhavsar2504@gmail.com> - 2020-08-10 17:10 +0200
  Re: Responsible Vulnerability Disclosure Dan Ritter <dsr@randomstring.org> - 2020-08-10 17:30 +0200

csiph-web