From owner-freebsd-security Thu Oct 22 10:02:10 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA21700 for freebsd-security-outgoing; Thu, 22 Oct 1998 10:02:10 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from kerouac.deepwell.com (deepwell.com [209.63.174.12]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id KAA21683 for ; Thu, 22 Oct 1998 10:02:07 -0700 (PDT) (envelope-from freebsd@deepwell.com) Received: (qmail 13378 invoked from network); 22 Oct 1998 17:26:57 -0000 Received: from terry.dcomm.net (HELO terry) (209.63.174.33) by deepwell.com with SMTP; 22 Oct 1998 17:26:57 -0000 Message-Id: <4.1.0.67.19981022093228.009d4450@mail1.dcomm.net> X-Sender: freebsd@mail.deepwell.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1.0.67 (Beta) Date: Thu, 22 Oct 1998 09:44:46 -0700 To: freebsd-security@FreeBSD.ORG From: Deepwell Internet Subject: Re: FrontPage Server Extensions In-Reply-To: <199810221314.IAA04777@leonardo.cascss.unt.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I'm in EXACTLY the same position. We run an ISP where our primary web server is a FreeBSD 2.2.6 box. If someone requests to use frontpage I have to go through the point-and-click hell of adding them into the NT server (Add a user into the domain, create a new folder, add them into IIS with both a website and an FTP account). This just turns into hell. I've been seriously thinking about installing the frontpage extensions, but I'm a little weary since this is a Stronghold secure webserver. People around the office have been saying that the FP extensions are insecure and buggy, but no one can point to any real examples. At 08:14 AM 10/22/98 -0500, you wrote: >Does anyone know of any glaring security wholes on a FreeBSD >system (we're currently at 2.2.6-Stable) that has the Microsoft >FrontPage Server Extensions installed? I've heard it wreaks >havoc on ownership/permissions of some files. Any ideas/comments >are welcome. > >---------------------------------------------- >John Booth >Computer Support Specialist >University of North Texas >Arts & Sciences Computing Services >phone: (940)565-4498, campus extension 4498 >Internet: john@unt.edu >GroupWise: cas.po7.john > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message