[26177] in bugtraq
Re: Hosting Controller Vulnerability
daemon@ATHENA.MIT.EDU (James Griffin)
Mon Jul 15 13:13:08 2002
Date: 14 Jul 2002 09:33:09 -0000
Message-ID: <20020714093309.22467.qmail@mail.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: James Griffin <james@38h.com>
To: bugtraq@securityfocus.com
In-Reply-To: <20020713151412.10889.qmail@mail.securityfocus.com>
Same security hole in Version 1.4
I have tested this vulnerability in version 1.4 of hosting controller
and changed the Administrator password in the same way as described.
I applied the patch supplied and this successfully prevented reproduction
of the vulnerability.
