[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Security?



Hi all,

Just had a customer call and am a bit confused:

He goes to:

www.hisdomain.co.uk/admin

Types WRONGusername and password and gets the menu just the same as I would
get if I went to:

my.ip.add.ress/siteadmin

and typed my username and password in.

Now it just happens that with this particular user, the password is the same
as my siteadmin (long story) and the username is different.  He typed in
admin as the username rather than hisdomainadmin and this is what happened.

I'm guessing that you could use any domain on the server and, as long as you
get the right username and password, you would be in?

Andy
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.434 / Virus Database: 243 - Release Date: 25/12/02