VULHUB ™

Netscape's SuiteSpot server includes a web administration package. The username and encrypted password for the Administrator account is kept in a world-readable file at (webroot)/admin-serv/config/admpw. In addition, the file is installed by default with write permissions for all local users.

Netscape's SuiteSpot server includes a web administration package. The username and encrypted password for the Administrator account is kept in a world-readable file at (webroot)/admin-serv/config/admpw. In addition, the file is installed by default with write permissions for all local users.