Hi Rolf
I'm sorry for getting back so late to you (I did not receive your
email via the bugtracker)!
Please note the following from esmtprc manpage:
username
Set the username for authentication with the
Package: esmtp
Version: 0.6.0-1
Severity: critical
Tags: security
Justification: root security hole
The configuration file for esmtp is installed world-readable. This is a
security
hole since it may contain user/password combinations for remote mail servers.
This
is even likely to be generally
2 matches
Mail list logo