catalyst2 community forums - View Single Post

WhiskyFudge · 13-07-2006, 11:26 AM

I have seen the ticket regarding this and I am looking into solutions. Please be patient.

It was a DNN site that was the source of the original problem. A hacker managed to abuse a security hole that existed in DNN, which in turn allowed him to abuse a security hole Catalyst2's policy. Due to this we have patched the hole and in the process of performing a security audit on the .net policies.

Whilst I realise that the additional security is a pain for people who are trying legitimately use the system. Catalyst2 have made a decision to put security (of both the system/network and other users) 1st. I hope you can understand and appreciate this decision.

At the moment all my time is going to fix any site that has been effected by the new security policy. Unfortunately it appears that DNN is not the only package that has problems. Thus things are taking time. Please be assured we are working to solutions as fast as we can. We want your sites down as little as you do.

If you are having problems (With any .net security issue, not just DNN) please raise a ticket so I know about every site and I can check every site.

Regards

Jason Robbins

13-07-2006, 11:26 AM	#3 (permalink)
WhiskyFudge Administrator Join Date: Oct 2003 Posts: 1,485	I have seen the ticket regarding this and I am looking into solutions. Please be patient. It was a DNN site that was the source of the original problem. A hacker managed to abuse a security hole that existed in DNN, which in turn allowed him to abuse a security hole Catalyst2's policy. Due to this we have patched the hole and in the process of performing a security audit on the .net policies. Whilst I realise that the additional security is a pain for people who are trying legitimately use the system. Catalyst2 have made a decision to put security (of both the system/network and other users) 1st. I hope you can understand and appreciate this decision. At the moment all my time is going to fix any site that has been effected by the new security policy. Unfortunately it appears that DNN is not the only package that has problems. Thus things are taking time. Please be assured we are working to solutions as fast as we can. We want your sites down as little as you do. If you are having problems (With any .net security issue, not just DNN) please raise a ticket so I know about every site and I can check every site. Regards Jason Robbins __________________ Jason Robbins jason@catalyst2.com