Interesting point... this looks like a widespread problem...

http://www.logitech.com/CFIDE/administrator/index.cfm
http://www.forta.com/CFIDE/administrator/index.cfm
http://www.nflshop.com/CFIDE/administrator/index.cfm

Someone stop this bug before we all get hurt!

-nathan strutz

  -----Original Message-----
  From: Buggy [mailto:[EMAIL PROTECTED]
  Sent: Friday, January 09, 2004 2:31 PM
  To: CF-Talk
  Subject: ColdFusion Administrator Not secured!!

  I have installed ColdFusion MX with the bundled webserver and restricted
the bundled webserver to run only on 127.0.0.1.  I only want to administer
the ColdFusionAS from the console.

  Next I installed Apache2 and configured it to work with ColdFusion.
Everything works fine except that I am able to get to the ColdFusion
Administrator pages with the Apache website.

  When I type in the following URL:
  http://www.company.com/CFIDE/administrator/

  I get HTTP 404 - File not found.

  But when I type in the following URL with the index.cfm template on the
end:
  http://www.company.com/CFIDE/administrator/index.cfm

  I am given the ColdFusion Administrator Login page with no graphic images.
After longing into the ColdFusion Administrator I am given the Administrator
pages with no graphic images.

  I suspect that this might have something to do with the Mappings in the
ColdFusion Administrator.  I am unable to delete the Logical Path /CFIDE in
the Mappings section in order to test this out.

  Anyone have any ideas on how to fix this?

  Thanks,
  Troy
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to