mldonkey, a multi-networks file-sharing client - Patches: patch #4930, giFT GUI: Authentication support
You are not allowed to post comments on this tracker with your current authentication level.
patch #4930: giFT GUI: Authentication support
Submitter: | None | ||
Submitted: | Tue 21 Feb 2006 09:05:03 AM UTC | ||
Category: | None | Priority: | 5 - Normal |
Status: | Done | Assigned to: | None |
Originator Email: | -email is unavailable- | Open/Closed: | Closed |
Jump to the original submission
Wed 01 Mar 2006 08:05:18 PM UTC, comment #7: |
spiralvoice <spiralvoice> |
Mon 27 Feb 2006 03:21:47 AM UTC, comment #6: based on pangos patch
|
spiralvoice <spiralvoice> |
Tue 21 Feb 2006 09:05:03 AM UTC, comment #5: This item has been reassigned from the project mldonkey, a multi-networks file-sharing client bugs tracker to your tracker. |
spiralvoice <spiralvoice> |
Thu 25 Aug 2005 08:23:40 PM UTC, comment #4: I checked my client (2.6.3), and it is using the OLD default gift port setting, therefore it is vulnerable to this security hole. I presume that many or most clients would behave the same way upon an upgrade, which leaves them insecure, regardless of the new default to disable it.
|
Anonymous |
Wed 30 Mar 2005 04:12:47 PM UTC, comment #3: Just some additional info.
|
mwarning <mwarning> |
Sat 19 Mar 2005 10:21:05 PM UTC, comment #2: that's why the port is set to 0 per default in 2.5.30ab . 0 disables that port. |
Amorphous <amorphous> |
Sat 19 Mar 2005 09:39:10 PM UTC, comment #1:
|
Anonymous |
Tue 21 Feb 2006 09:05:03 AM UTC, original submission:
GIFT port is open by default and does not have any authentication mechanism. Anyone with the ability to connect to this port can obtain control over the core. This is a huge gaping security hole. Please fix asap. |
Anonymous |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 7 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2006-03-01 | spiralvoice | Status | None | Done | |
Open/Closed | Open | Closed | |||
2006-02-27 | spiralvoice | Attached File | #5977 | Removed | |
2006-02-27 | spiralvoice | Summary | Remove Gift GUI support | giFT GUI: Authentication support | |
Attached File | - | Added gift_gui_authentication.patch, #5992 | |||
2006-02-21 | spiralvoice | Summary | Reassigned item: Remove Gift GUI support | Remove Gift GUI support | |
2006-02-21 | spiralvoice | Reassign item | From group mldonkey, a multi-networks file-sharing client, bugs tracker | To group mldonkey, a multi-networks file-sharing client, patch tracker |
Powered by Savane 3.13-bb6a.
Corresponding source code
Applied 2006/03/01