[Nolug] brain-dead Linksys (CISCO) engineers

From: Joey Kelly <joey_at_joeykelly.net>
Date: Mon, 3 Nov 2014 09:46:22 -0500 (EST)
Message-ID: <63407.168.251.2.35.1415025982.squirrel@secure.redfishnetworks.com>

Check this out...

Any decent webserver is going to disallow access to HTTP AUTH .htaccess
files, for obvious reasons. Any programmer with even a modicum of sense is
going to put the .htpasswd file out of the path of the webserver, just
like the docs say. Not Cisco:

http://www.kb.cert.org/vuls/id/447516

--Joey Kelly
___________________
Nolug mailing list
nolug@nolug.org
Received on 11/03/14