[cobalt-users] telnet on raq3 allows users to view source of other sites

[Luc Schiltz <becher@xxxxxx>]

hi,

why has anybody, who got telnet access, access to other sites e.g

I created a user called test with telnet access
this user test logs into the raq3 an can cd /home/sites/site14
do an ls -la of the web directory etc ...

is there any patch available for this ? as this presents a big security hole, e.g.
a user who is running php3 and connects to a mysql database, he got the login & passwd
of the mysql database stored in a file in the directory web ...

thanks


Luc