bpfire

mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00

Files

Peter Müller 0effbb3569 fix WebUI system information leak

Disable unauthenticated access to cgi-bin/credits.cgi. The page
leaks the currently installed version of IPFire and the hardware
architecture.

Both information might make a successful attack much easier.

This issue can be reproduced by accessing https://[IPFire-IP]:444/cgi-bin/credits.cgi
and accepting a SSL certificate warning (if any).

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-09-04 12:25:23 +01:00

conf.d

Typo in compilation commands of postfix.

2007-11-01 14:18:27 +00:00

vhosts.d

fix WebUI system information leak

2017-09-04 12:25:23 +01:00

default-server.conf

Nagios addon install.sh with vhost Port 1007 added

2009-03-14 14:00:46 +01:00

global.conf

Fix potential HTTPoxy vulnerability