[Pkg-nagios-devel] Bug#269221: marked as done (cgi-bin contains daemon executable)

Debian Bug Tracking System owner@bugs.debian.org
Sun, 05 Dec 2004 20:03:05 -0800


Your message dated Sun, 05 Dec 2004 22:47:11 -0500
with message-id <E1Cb9qB-0005xJ-00@newraff.debian.org>
and subject line Bug#269221: fixed in nagios 2:1.3-0+pre5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 31 Aug 2004 13:08:25 +0000
>From anders@schlund.de Tue Aug 31 06:08:25 2004
Return-path: <anders@schlund.de>
Received: from mxintern.kundenserver.de (mxintern.schlund.de) [212.227.126.201] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1C28N7-0000o0-00; Tue, 31 Aug 2004 06:08:25 -0700
Received: from [172.19.16.7] (helo=home.kundenserver.de)
	by mxintern.kundenserver.de with esmtp (Exim 4.34)
	id 1C28N6-0002Rd-6U
	for submit@bugs.debian.org; Tue, 31 Aug 2004 15:08:24 +0200
Received: from anders by home.kundenserver.de with local (Exim 3.35 #1)
	id 1C28N6-0002Sz-00
	for submit@bugs.debian.org; Tue, 31 Aug 2004 15:08:24 +0200
Date: Tue, 31 Aug 2004 15:08:24 +0200
From: Anders Henke <anders@schlund.de>
To: submit@bugs.debian.org
Subject: cgi-bin contains daemon executable
Message-ID: <20040831130824.GA9236@schlund.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Organization: Schlund + Partner AG
User-Agent: Mutt/1.5.5.1i
X-Virus-Scanned: Symantec AntiVirus Scan Engine
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_20,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Package: nagios
Version: 1.1-11

The package for nagios-text contains a copy of the nagios daemon
(found in /usr/sbin/nagios) also in /usr/lib/cgi-bin/nagios.

Running http://localhost/nagios/cgi-bin/nagios does only give the error
message from nagios and afaik has no further exploitable risks, so I don't 
grade this bug as being more important than a 'normal' bug.

Fix: remove /usr/lib/cgi-bin/nagios.

Regards,

Anders

---------------------------------------
Received: (at 269221-close) by bugs.debian.org; 6 Dec 2004 03:49:19 +0000
>From katie@ftp-master.debian.org Sun Dec 05 19:49:18 2004
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1Cb9sB-00077j-00; Sun, 05 Dec 2004 19:49:15 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1Cb9qB-0005xJ-00; Sun, 05 Dec 2004 22:47:11 -0500
From: Sean Finney <seanius@debian.org>
To: 269221-close@bugs.debian.org
X-Katie: $Revision: 1.54 $
Subject: Bug#269221: fixed in nagios 2:1.3-0+pre5
Message-Id: <E1Cb9qB-0005xJ-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Sun, 05 Dec 2004 22:47:11 -0500
Delivered-To: 269221-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 

Source: nagios
Source-Version: 2:1.3-0+pre5

We believe that the bug you reported is fixed in the latest version of
nagios, which is due to be installed in the Debian FTP archive:

nagios-common_1.3-0+pre5_all.deb
  to pool/main/n/nagios/nagios-common_1.3-0+pre5_all.deb
nagios-mysql_1.3-0+pre5_i386.deb
  to pool/main/n/nagios/nagios-mysql_1.3-0+pre5_i386.deb
nagios-pgsql_1.3-0+pre5_i386.deb
  to pool/main/n/nagios/nagios-pgsql_1.3-0+pre5_i386.deb
nagios-text_1.3-0+pre5_i386.deb
  to pool/main/n/nagios/nagios-text_1.3-0+pre5_i386.deb
nagios_1.3-0+pre5.diff.gz
  to pool/main/n/nagios/nagios_1.3-0+pre5.diff.gz
nagios_1.3-0+pre5.dsc
  to pool/main/n/nagios/nagios_1.3-0+pre5.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 269221@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sean Finney <seanius@debian.org> (supplier of updated nagios package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 02 Dec 2004 12:05:10 -0500
Source: nagios
Binary: nagios-pgsql nagios-text nagios-mysql nagios-common
Architecture: source i386 all
Version: 2:1.3-0+pre5
Distribution: unstable
Urgency: low
Maintainer: Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>
Changed-By: Sean Finney <seanius@debian.org>
Description: 
 nagios-common - A host/service/network monitoring and management system
 nagios-mysql - A host/service/network monitoring and management system
 nagios-pgsql - A host/service/network monitoring and management system
 nagios-text - A host/service/network monitoring and management system
Closes: 269221 282591 282791 283355 283870 283875
Changes: 
 nagios (2:1.3-0+pre5) unstable; urgency=low
 .
   * Sean Finney:
     - nagios packages no longer put a copy of the nagios binary in the
       cgi-bin directory (closes: #269221).
     - corrected path to printf in code and documentation.  thanks to
       peter hicks <peter.hicks@poggs.co.uk> (Closes: #282591).
     - corrected nsca related paths in code and documentation.  thanks
       again to peter (Closes: #282791).
     - other misc path fixes in html path-fixing patch.  there's probably
       still more, but got a bunch of them.
     - fix for error value of config file removal in nagios-common
       (Closes: #283355).  thanks to Olaf van der Spek <OvdSpek@LIACS.NL>.
     - everything in hosts.cfg was duplicated because of a bug in the
       postinst for nagios-common.  fixed.  thanks again to Olaf.
       (Closes: #283870).
     - init script has a better check for running nagios processes.  really,
       we should be use start-stop-daemon, but this will work for
       the time being.  thanks again, Olaf.  (Closes: #283875)
     - removed the "-e 5" from the check_started part of the init script,
       as it was preventing some users from restarting (see #283875).
       thanks to tony mancill <tony@mancill.com>.
Files: 
 29185546a529de2965945ddab6d6cf7e 992 net optional nagios_1.3-0+pre5.dsc
 64b7f9579ec891b927e395e8d7ce2542 77902 net optional nagios_1.3-0+pre5.diff.gz
 d8651baf3564586ade346d4b0f45fd5c 901446 net optional nagios-text_1.3-0+pre5_i386.deb
 28396a53c794750973ef152c4e116c2e 916440 net optional nagios-mysql_1.3-0+pre5_i386.deb
 3fe73f52ba8467607dfe2b655929db56 926692 net optional nagios-pgsql_1.3-0+pre5_i386.deb
 d7a00c4cf393bfdb48abbbbdd0537669 1212802 net optional nagios-common_1.3-0+pre5_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBs89kynjLPm522B0RAoxiAJ9JTH7anlhA7eQcevEZ3J+3L+xA8gCdF0wz
gUJhzhtJlRAUR/wvamijbrk=
=XUa2
-----END PGP SIGNATURE-----