[cobalt-security] Weird admin password issues

[Erich Zigler <erichz@xxxxxxxxxxxxx>]

I am experiencing a weird issue with one of our Cobalt RAQ2's. It seems when
you go to the the web-based admin interface at http://$IPADDR/admin it will
let you in without a password. But if you telnet in to $IPADDR it requires
the already set admin password to login.

I have changed the admin password via the web interface, and went to an
entirely different computer and it let me in without a password. I have
changed the admin password via the command line and the web interface still
lets me in without a password.

I have searched the mailing lists, and the manuals on cobalt.com. I have
also patched the server up to the latest security release as of yesterday.
No net change. 

Any help you could provide I would greatly appreciate.

Thank you.

-- 
Erich Zigler