Redhat secure server - Feb 2000 - FrontPage 2000 security risk?

Using a machine with FP2000 installed on it, go to www.hackerwhacker.com and
run a scan.  I came across an odd blip the other night on a windows machine
with FP installed whereby a port was opened by the application (port 1245 I
think), it returned an http query.  I haven''t had time or another
machine to
attempt to duplicate the blip...
Vic

Hi,

I went looking for the list archives at: http://archive.redhat.com and
didn''t notice them. Did
I overlook something? I''m creating my own archive anyway.

I recentlly purchased Red Hat 6.1 with the secure server. In the secure
server install manual,
there is notice that the FrontPage extensions are a security risk,
something about having to
grant root access.

At a glance of the FrontPage extentions install procedure, I did not see
any reference to granting
root access to anything.

Any comments on this?

Thanks,

--Paul T.

Frontpage traditionally has been a security problem, you may need to dig
around some other sites to find out about the latest ones.......

I cannot see any reason to add them to Apache at all, if you need to offer
these for clents, do so from NT4 with iis

*********** REPLY SEPARATOR  ***********

On 18/02/00 at 15:24 Paul Thomas wrote:
>Hi,
>
>I went looking for the list archives at: http://archive.redhat.com and
>didn''t notice them. Did
>I overlook something? I''m creating my own archive anyway.
>
>I recentlly purchased Red Hat 6.1 with the secure server. In the secure
>server install manual,
>there is notice that the FrontPage extensions are a security risk,
>something about having to
>grant root access.
>
>At a glance of the FrontPage extentions install procedure, I did not see
>any reference to granting
>root access to anything.
>
>Any comments on this?
>

-- 

Greg Wright

IT Consultant Sydney Australia     PH 0418 292020
Available for Global Contracts   Int. +61 418 292020
web  http://www.ausit.com    e-mail greg@ausit.com
T/A AAA Computers & ITpro & Ozzie Soft, providers of IT, ISP &
Software
services.