Menu

#154 [SECURITY] hosts can erase access entries set by owners

security_bugs
closed-fixed
9
2005-04-18
2005-04-14
Keith Gable
No

Minor issue, yes, but still an issue. Hosts can remove
access entries added by owners. This is a breach of
channel security, and actually a quite minor one. If it
becomes an issue before 0.3.7, I'll release a patch.

Discussion

  • Keith Gable

    Keith Gable - 2005-04-17

    Logged In: YES
    user_id=919946

    - Need function to safely clear an access entry type,
    returning false if some entries couldn't be deleted, true
    otherwise.

     
  • Keith Gable

    Keith Gable - 2005-04-18

    Logged In: YES
    user_id=919946

    The reported bug has been fixed in the sourcecode and will be
    avaliable in the CVS within the next 24 hours.

     
  • Keith Gable

    Keith Gable - 2005-04-18
    • status: open --> closed-fixed
     

Log in to post a comment.