Bug 37847 - Security Update as per Netwinsite recomendation
Summary: Security Update as per Netwinsite recomendation
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-05-08 03:30 UTC by Mark Russell
Modified: 2002-05-08 12:09 UTC (History)
0 users

See Also:


Attachments
file.diff (716 bytes, patch)
2002-05-08 03:30 UTC, Mark Russell
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Russell 2002-05-08 03:30:01 UTC
From mail sent from the Authors:-

      Hi, we have identified a security fault in dnews and strongly recommend people                       
upgrade to version 5.5h2 available now for most systems:                                             
                                                                                                     
http://netwinsite.com/dnews/download2.htm                                                            
                                                                                                     
Please also add settings like this to your dnews.conf to further limit                               
any possible remote access to your system, lets assume your local ip                                 
addresses are 10.0.0.* then you would use:                                                           
                                                                                                     
        tellnews_pass_mask 10.0.0.*,127.0.0.1                                                        
        dmgrsvc_access 10.0.0.*,127.0.0.1

How-To-Repeat: Install Dnews
Comment 1 Chris D.Faulhaber freebsd_committer freebsd_triage 2002-05-08 12:09:26 UTC
State Changed
From-To: open->closed

Committed, thanks!