No,

But now every Skiddie and wanna be hacker out there does!

Nice one 


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of alex
Sent: 06 June 2003 18:01
To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]

MAJOR UNSOLVED BUG IN THE GUI(WEBPANEL) COBALT-550

I sent a radiance to SUN two months ago and Sun engineers haven't solved
this problem.

I think that problem know is known by many people but it is not solved

If you are an adminsite you can acces to all the adminsite accounts of the
server, you only have to change the url variable.
I'm going to give you an example:

I'm the adminsite of domain.com, I acces the GUI SITE ADMIN and the url that
i have in the browser is:

https://www.domain.net:81/nav/cList.php?root=sitemanageRoot&group=site13&hos
tname=www.domain.net&goto=base_userList

If I change the site number from site13  to 12 then i'll be the
administrator of site12.

Anyone knows how to solve it?

Thank

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security



_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to