There was an exploit for the full SiteMinder release that was published a
month or two ago. Allaire's right that the particular exploit won't work
with CF installations. I had stated that I wrote my beefed-up CF
Administrator partly because of that.
What bothered me more was the password being stored as a cookie (encrypted
somewhat weakly.) Mainly I was pointing out the cool things you can do with
weak encryption. Like a custom CF admin. :P
I'd recommend at least putting basic web server authentication on your CF
Admin... they're right though, this particular problem doesn't really matter
for CF folks.
Ed
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
