Bug#568925: esmtp: configuration file world-readable

2010-02-11 Thread Salvatore Bonaccorso
Hi Rolf I'm sorry for getting back so late to you (I did not receive your email via the bugtracker)! Please note the following from esmtprc manpage: username Set the username for authentication with the

Bug#568925: esmtp: configuration file world-readable

2010-02-08 Thread Rolf Leggewie
Package: esmtp Version: 0.6.0-1 Severity: critical Tags: security Justification: root security hole The configuration file for esmtp is installed world-readable. This is a security hole since it may contain user/password combinations for remote mail servers. This is even likely to be generally