[3190] in WWW Security List Archive
Re: FrontPage -- impressions?
daemon@ATHENA.MIT.EDU (Scott Lystig Fritchie)
Thu Oct 10 15:44:42 1996
To: drb@gopher.cl.msu.edu
cc: www-security@ns2.rutgers.edu
In-reply-to: Message of "Wed, 09 Oct 1996 15:05:45 CDT."
<9610091905.AA39757@burrow.cl.msu.edu>
Date: Thu, 10 Oct 1996 12:21:10 -0500
From: Scott Lystig Fritchie <fritchie@MR.Net>
Errors-To: owner-www-security@ns2.rutgers.edu
>>>>> On Wed, 09 Oct 96 15:05:45 -0500, Dennis Boone <drb@burrow.cl.msu.edu> said:
db> I recall some discussion of problems with the MS FrontPage server
db> side extensions a couple of months ago. I didn't file the
db> information at the time. We're suddenly getting requests for
db> installation of same.
See http://www.mr.net/~fritchie/frontpage.html for my rantings. Don't
look at it if you aren't interested in an exploit script to modify the
content of another FP-enabled virtual server on the same machine as
yours. :-)
-Scott
---
Scott Lystig Fritchie, Network Engineer MRNet Internet Services, Inc.
fritchie@mr.net, PGP key #152B8725 Minnesota Regional Network
v: 612/362.5820, p: 612/637.9547 2829 University Ave SE
http://www.mr.net/~fritchie/ Minneapolis, MN 55414
