Wanadoo's User Security Snafu
Posted: 18th May, 2006 By: MarkJ
ISP Wanadoo has fixed a security problem that exposed an unknown number of subscribers personal details to the public. Oh, did we mention that the flaw had existed for two years?:
The flaw arose because its web servers were incorrectly configured, thereby allowing users to view the contents of an entire folder instead of just an index web page.
Because of this index browsing flaw, it was possible for snoops to uncover the real name, user name, password, email address, and web space sub domain of listed customers from the affected account recovery system web servers. No authentication would have been required to retrieve this data.
Postings in a Wanadoo forum suggest the issue has existed for more than two years. However, there is no evidence that it has been exploited by hackers.
We suppose its better late than never =). More @ The Register.
The flaw arose because its web servers were incorrectly configured, thereby allowing users to view the contents of an entire folder instead of just an index web page.
Because of this index browsing flaw, it was possible for snoops to uncover the real name, user name, password, email address, and web space sub domain of listed customers from the affected account recovery system web servers. No authentication would have been required to retrieve this data.
Postings in a Wanadoo forum suggest the issue has existed for more than two years. However, there is no evidence that it has been exploited by hackers.
We suppose its better late than never =). More @ The Register.
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
150,000+ Customers | View More ISPs
Cheapest ISPs for 100Mbps+
Modest Availability | View More ISPs
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
Large Availability | View All
Helpful ISP Guides and Tips
Sponsored Links
The Top 15 Category Tags
- FTTP (7140)
- BT (3986)
- Politics (3217)
- Business (2922)
- Openreach (2780)
- Mobile Broadband (2632)
- Building Digital UK (2582)
- 4G (2224)
- Statistics (2223)
- FTTC (2165)
- Virgin Media (2132)
- 5G (1894)
- Ofcom Regulation (1858)
- Fibre Optic (1659)
- Wireless Internet (1644)
Sponsored
Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules