[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-security] FW: Chili!Soft ASP Multiple Vulnerabilities



> ChiliSoft very politely returns the servers ADMIN and encrypted password
> to the browser.
You can always remove the samples virtual dirs in http.conf. (as the
security bulletin instructs)

> The ChiliSoft Server Admin Password is the same as the Servers Main
> Admin aka Root.

Not true on my server (RaQ3i). Anyway you can change the casp admin password
by removing the user and recreating it immediately after using the shell
base admintool.

Audric