(RADIATOR) security with radwho.cgi

[Utku Er]

Hi,     I was using RADIATOR radwho CGI scripts for a long time. Some time ago I log into my machine and see my database ip, port, database username and database password in the /tmp/xxx file in a world readable format... I see that radwho.cgi within the radiator package creates this file.     Maybe this isn't a big security thread but maybe some people see this file and wonder what it is.   I create scripts in my internal machines and get session table directly from the database.   Utku.