We have a new client with a self-hosted server who has
asked us to make some emergency changes. He lost his
previous developer and does not know where to find him
(.. and no - the site is not littlebopeep.com). He does
not know the cf administrator password and it's important
that we
As a member of the CF community I suggest you follow proper ethical
procedures.
On Mon, 7 Oct 2002, Mark A. Kruger - CFG wrote:
Folks,
We have a new client with a self-hosted server who has asked us to make some
emergency changes. He lost his previous developer and does not know where to
Off the top of my head, no, but if you can get into the registry you can set
Administrator to not require a password. Sorry, but I don't know the key
either.
However, Google is a wonderfult thing:
http://www.teratech.com/coldcuts/cutdetail.cfm?cutid=253
http://www.mail-archive.com/cf-talk@houseoffusion.com/msg05663.html
Quote:
yeah you can disable it in the registry, set a new one, then enable it
again.
HKEY_LOCAL_MACHINE\SOFTWARE\Allaire\ColdFusion\CurrentVersion\Server\UseAdmi
nPassword = 0
That will disable the password
Pete
-
:
Subject: Re: CF 5 Hack
10/07/02
12:00 PM
I am following those procedures. I think I've been quite open about it.
-mk
-Original Message-
From: Alex [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 07, 2002 12:00 PM
To: CF-Talk
Subject: Re: CF 5 Hack
As a member of the CF community I suggest you follow proper ethical
, 2002 12:00 PM
To: CF-Talk
Subject: Re: CF 5 Hack
As a member of the CF community I suggest you follow proper ethical
procedures.
On Mon, 7 Oct 2002, Mark A. Kruger - CFG wrote:
Folks,
We have a new client with a self-hosted server who has asked us to make
some
emergency changes. He lost his
Ethical procedures:
1. The owner of the site have full right to know and change the passwords on
the site.
2. Any developer must inform their employer of any passwords for the site.
3. A developer who leaves an employer should inform the employer of their
change in work status as well as follow
to find a bunch of vulnerable sites.
That would be bad, as it would point out blaring holes in security.
-Original Message-
From: Mark A. Kruger - CFG [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 07, 2002 10:17 AM
To: CF-Talk
Subject: RE: CF 5 Hack
I am following those procedures
the future in the present]
[connecting people, places and things]
-Original Message-
From: Mark A. Kruger - CFG [EMAIL PROTECTED]
Date: Mon, 7 Oct 2002 12:17:12 -0500
Subject: RE: CF 5 Hack
I am following those procedures. I think I've been quite open about
it.
-mk
-Original Message
Dinowitz [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 07, 2002 12:16 PM
To: CF-Talk
Subject: Re: CF 5 Hack
Ethical procedures:
1. The owner of the site have full right to know and change the passwords on
the site.
2. Any developer must inform their employer of any passwords for the site.
3
: CF 5 Hack
Ethical procedures:
1. The owner of the site have full right to know and change the passwords
on
the site.
2. Any developer must inform their employer of any passwords for the site.
3. A developer who leaves an employer should inform the employer of their
change in work status
Yeah, change the registry setting. Either with the cfregistry tag or
regedit.
cfregistry action=SET
branch=HKEY_LOCAL_MACHINE\Software\Allaire\ColdFusion\CurrentVersion\Server
entry=UseAdminPassword type=String value=0
Cheers,
Sam
- Original Message -
From: Mark A. Kruger - CFG
not doing anything funny? Exactly what would satisfy you
beyond the honesty I've already displayed?
-mk
-Original Message-
From: Alex [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 07, 2002 12:00 PM
To: CF-Talk
Subject: Re: CF 5 Hack
As a member of the CF community I suggest
14 matches
Mail list logo
