[Xitami] password in clear text

[xitami@lists.xitami.org]

For x = 1 to 28: print "Thanks for posting that 28 times":next x.  

But seriously, if you do not control local read and write access to 
any server (not just Xitami) then it is you who are the weakest link.  

This is not a Xitami issue but one of protecting idiots from 
themselves.  At this level of inadequacy it's better to just let 
Darwinism cull the flock.

Michael



On 29 Nov 2001, at 5:11, Bernd Luevelsmeyer wrote:

> Hi,
> 
> on the Bugtraq mailing list, "Larry W. Cashdollar" raised the issue
> of Xitami storing the admin password in clear text in its default
> installation. If you are interested, please dig the archives at
> http://www.securityfocus.com. The Message ID is
> <20011126145820.R78965-100000@vapid.dhs.org> and the exact subject
> is "Xitami Webserver stores admin password in clear text.".
> 
> On FreeBSD the program won't run automatically after installation,
> but I'll provide more configuration help and safer defaults anyway.
> 
> Greetings,
> 	Bernd
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami