[Xitami] password in clear text

Bernd Luevelsmeyer xitami@lists.xitami.org
Thu, 29 Nov 2001 05:11:49 +0100


Hi,

on the Bugtraq mailing list, "Larry W. Cashdollar" raised the issue
of Xitami storing the admin password in clear text in its default
installation. If you are interested, please dig the archives at
http://www.securityfocus.com. The Message ID is
<20011126145820.R78965-100000@vapid.dhs.org> and the exact subject
is "Xitami Webserver stores admin password in clear text.".

On FreeBSD the program won't run automatically after installation,
but I'll provide more configuration help and safer defaults anyway.

Greetings,
	Bernd