Hi, folks!

Just found this on forum queue:

++++++++++++++++
Hi,

SNF 7.2 has a very serious flaw!!! I found it today. The flaw is that any
user who have access to the PC that has been used by system administrator
can log in into the firewall without giving a password.

Try this from any PC in your network. I use a windows 95.

1. Go to https://192.168.0.1:8443  and login. ( the ip of firewall depend
on your setting )
2. Logout from the webpage
3. type back https://192.168.0.1:8443 the page will come out and press
login button.. Voila.. you can access the firewall administartion page
without password. What a very secured firewall!


I hope MandrakeSecurity team will look into this matter quickly. Anyway
thanks to the great product.

- dman
Malaysia
+++++++++++

WDYT?
        Denis
-- 
-----------------------------------------------------
Dr. Denis Havlik               http://MandrakeForum.com
Mandrakesoft           |||     e-mail: [EMAIL PROTECTED]
Community             (@ @)    (private: [EMAIL PROTECTED])
------------------oOO--(_)--OOo---------------------
Business customers don't want an operating system called Mandrake
or an interface called KDE." (David Coursey on AnchorDesk, June 2001)
Visit http://mandrakebizcases.com for reality check ;-)

---------- Forwarded message ----------
Date: Sun, 17 Jun 2001 11:46:50 +0200
From: JONANDDRAG <[EMAIL PROTECTED]>
To: Denis HAVLIK <[EMAIL PROTECTED]>
Subject: gaga

Draga Fu,

Hvala ti za rodendansku cestitku. Uzasno mi je krivo sto nisam bila kuci
posto bi me jako radovala prilika da pricam sa tobom. Nadam se da si mi
dobro. Sto su vasi planovi za ovo ljeto? Jonathan i ja idemo za Bosnu 14
jula na sedmicu dana posto on mora da pravi dokumentarni program o bosanskom
srpskom & hrvatskom  jeziku: da li su isti ili pak razliciti. Radice
intervjuve u Banjaluci, Sarajevu i Mostaru. Ja cu citavo vrijeme biti u
Banjaluci posto bih htjela da provedem malo vise vremena sa Aleksom (Batinim
sinom).
da li ste jos uvijek na istoj adresi u Parizu?
Voljela bih da mi dodete u goste ovo ljeto. Amsterdam nije daleko od Pariza,
znas i sama. Hajde razmisli o pozivu pa mi javi da li biste mogli.
Bas bih voljela da se vidimo.
Dozdravi Denisa i poljubi Robina 100 puta od mene.

Gaga





Reply via email to