davical shows database password in logfile

Bug #523153 reported by H.-Dirk Schmitt
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
DAViCal
Unknown
Unknown
davical (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: davical

The following line is written to the logfile (/var/log/apache2/error.log) if the database isn't available (e.g. host down):

[Wed Feb 17 12:36:17 2010] [error] [client xxx.xxx.xxx.xxx] davical: ***: ERROR:Connection failed: >>0<< = >>dbname=davical user=davical_app port=5433 host=xxxxx.xxxxx.xxx password=YN4wIyhcPRFruF0hyHrj<<

Revision history for this message
H.-Dirk Schmitt (dirk-computer42) wrote :

ii davical 0.9.7-0 The DAViCal CalDAV Server

Changed in davical (Ubuntu):
status: New → Confirmed
importance: Undecided → Medium
visibility: private → public
Revision history for this message
Andrew McMillan (karora) wrote :
Andrew McMillan (karora)
Changed in davical (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.