[Zope] security hole

Max M maxm@mxm.dk
Fri, 28 Mar 2003 10:45:20 +0100


Stephan Goeldi wrote:

>accessing a zope site with nautilus can show you the whole structure: folders,
>methods and documents. On some sites you see the source of index_html. I
>didn't figure out, what makes the difference.
>

Are you shure that you are not logged in to the site? If you are, it is 
not a security hole, but perhaps a bug in Nautilus with regards to 
WebDav. Which sounds more likely.

regards Max M