Vulnerability Development mailing list archives

Re: Lotus Domino 5.0.5 Web Server vulnerability - reading fi


From: Thomas Schweikle <tschweikle () FIDUCIA DE>
Date: Wed, 10 Jan 2001 13:07:42 +0100


You can temporarily fix the problem by creating a
file protection. Protect /.nsf/../ and set Default
to no access. Also protect .ns4 and .box The file
protection will give You a login-prompt.

... what might not be what you intended -- a logon
prompt might make people think there will be information
interesting to them. Making them try harder to break in.

--
Thomas

Current thread: