RE: NETWORK SOLUTIONS SECURITY TRUTHS?

[Charles Sprickman <spork () inch com>]

On Tue, 9 May 2000, Derrick wrote:

> Well the site was showing nice info and now says document not found. I guess
> someone at NSI actually reads this list. Too bad their response times on
> their customer issues aren't anywhere near that fast.

This issue was spotted at least six months ago...  who doesn't feel the
urge to put in some more "../../../" when you see a perl cgi with a
variable like "FILE=../"?

Never fear, there's always more cgi's on that machine.  My guess would be
they fixed one bug.  Given the track record...

Charles
 
> Derrick
>
> > -----Original Message-----
> > From: owner-nanog () merit edu [mailto:owner-nanog () merit edu]On Behalf Of
> > Joe Abley
> > Sent: Tuesday, May 09, 2000 5:39 PM
> > To: Christian Nielsen
> > Cc: nanog () nanog org; Exiled Dave
> > Subject: Re: NETWORK SOLUTIONS SECURITY TRUTHS?
> >
> >
> >
> > On Tue, 9 May 2000, Christian Nielsen wrote:
> >
> > > Yea, Netsol is broken. they cant always get domain info correct or make
> > > updates in a timely matter. But I think a quick mail to Netsol
> > first and if
> > > they didnt do anything, maybe bugtraq if it effects others.
> >
> > Of course, it would be easier to let them know that something was wrong if
> > the whois record for networksolutions.com didn't contain the e-mail
> > address:
> >
> >   not_valid_email () WORLDNIC COM
> >
> > and the phone number:
> >
> >   123 234 1234
> >
> > for Administrative, Technical and Zone Contacts.