[Pkg-utopia-maintainers] Bug#437721: avahi-daemon listening on all interfaces

[Andrzej Zięba]

Package: avahi-daemon
Version: 0.6.20-2
Severity: normal
Tags: security

--- Please enter the report below this line. ---

Tiger reports:
NEW: --WARN-- [lin003w] The process `avahi-daemon' is listening on 
socket 1024 (UDP on every interface) is run by avahi.

Apparently this is a security issue. There is no way to tell avahi not 
to listen on particular interface AFAIK, except some dirty trick to turn 
off multicast for the interface.


--- System information. ---
Architecture: i386
Kernel:       Linux 2.6.18-4-k7

Debian Release: lenny/sid
   990 testing         ftp.pl.debian.org

--- Package information. ---
Depends                (Version) | Installed
================================-+-============
libavahi-common3                 | 0.6.20-2
libavahi-core5                   | 0.6.20-2
libc6                 (>= 2.5-5) | 2.6-2
libcap1                          | 1:1.10-14
libdaemon0             (>= 0.11) | 0.12-0.1
libdbus-1-3           (>= 1.1.1) | 1.1.1-3
libexpat1            (>= 1.95.8) | 1.95.8-4
adduser                          | 3.104
dbus                   (>= 0.60) | 1.1.1-3
lsb-base              (>= 3.0-6) | 3.1-24