Post by rossi on Nov 26, 2009 4:42:26 GMT 7
The major problem that we have is the following … The root folder (and off course also all user folders!!!) can be accessed by using cross access.
For example the default link on the Webdisc:
http://IP-of-NAS/usr/?contant=/usr/webdisk.html?addpath=Music/
can be modified to http://IP-of-NAS/usr/?contant=/usr/webdisk.html?addpath=./../ and so any user can see the files in the other folders, that he doesn't have access to.
This is a problem!!!
What the hell the Quality department at Thecus is doing? Nothing??
Btw, it's known at the Thecus support since 06.07.2009 !!!!
Until know i didn't receive an reliable and really i will get rid of this nutsty problem! Thats why i bought an N0503 - read there other comments.....
For example the default link on the Webdisc:
http://IP-of-NAS/usr/?contant=/usr/webdisk.html?addpath=Music/
can be modified to http://IP-of-NAS/usr/?contant=/usr/webdisk.html?addpath=./../ and so any user can see the files in the other folders, that he doesn't have access to.
This is a problem!!!
What the hell the Quality department at Thecus is doing? Nothing??
Btw, it's known at the Thecus support since 06.07.2009 !!!!
Until know i didn't receive an reliable and really i will get rid of this nutsty problem! Thats why i bought an N0503 - read there other comments.....