Package: avahi-daemon
Version: 0.6.20-2
Severity: normal
Tags: security

--- Please enter the report below this line. ---

Tiger reports:
NEW: --WARN-- [lin003w] The process `avahi-daemon' is listening on socket 1024 (UDP on every interface) is run by avahi.

Apparently this is a security issue. There is no way to tell avahi not to listen on particular interface AFAIK, except some dirty trick to turn off multicast for the interface.


--- System information. ---
Architecture: i386
Kernel:       Linux 2.6.18-4-k7

Debian Release: lenny/sid
  990 testing         ftp.pl.debian.org

--- Package information. ---
Depends                (Version) | Installed
================================-+-============
libavahi-common3                 | 0.6.20-2
libavahi-core5                   | 0.6.20-2
libc6                 (>= 2.5-5) | 2.6-2
libcap1                          | 1:1.10-14
libdaemon0             (>= 0.11) | 0.12-0.1
libdbus-1-3           (>= 1.1.1) | 1.1.1-3
libexpat1            (>= 1.95.8) | 1.95.8-4
adduser                          | 3.104
dbus                   (>= 0.60) | 1.1.1-3
lsb-base              (>= 3.0-6) | 3.1-24



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to