[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] MAJOR BUG, Browse any directory view any file
- Subject: Re: [cobalt-users] MAJOR BUG, Browse any directory view any file
- From: "Herby K" <mad1.z@xxxxxxx>
- Date: Wed May 28 04:06:00 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
you mean via php?
----- Original Message -----
From: "ISEE Multimedia" <mail@xxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, May 28, 2003 12:58 PM
Subject: [cobalt-users] MAJOR BUG, Browse any directory view any file
> A Client of mine has just found out that he can list the contents of
> /home/sites/ giving him a list of all the sites on the server.
>
> Then with 2 lines of code he can view any file on another site on the
> server.
>
> Does anyone have a fix for this!! This is a major security hole for SUN.
>
> Regards
>
> Mark
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>