Date: Thu, 10 Dec 1998 19:59:28 +0200 From: Guy Cohen <guy@SPICE.ORG.IL> Subject: RealSystem passwords To: BUGTRAQ@NETSPACE.ORG -----BEGIN PGP SIGNED MESSAGE----- Hi, While installing the evaluation copy of RealSystem G2 server, you have to enter an admin username and password. The password is entered in clear text. not only this, it is writen to the conf file in clear text. not only this, the file is mode 644. The quick fix ofcource is chmod 600 the file. Reg. Guy Cohen. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBNnAMHu+apSPwRBL5AQE+DAQAgu7V5Ap5nefpog11EVqhzx1+c6SxbjCJ naGgyEY5Nwdv/hzqYGmSlgH1zgvJ6NqXKx7Oi0IOHno7d92Gpe4FHa4PLJVAveQt aklpeFbV3b4W3BswtFjX7v2rewCzY17XymHjo+MmfmDl3i8fDozim4yFjCFPzygS xM6F3ZULj9w= =Sxav -----END PGP SIGNATURE-----