[3193] in WWW Security List Archive
RE: FrontPage -- impressions?
daemon@ATHENA.MIT.EDU (Michael Mathieu)
Thu Oct 10 18:34:25 1996
From: Michael Mathieu <mikemat@microsoft.com>
To: "'drb@gopher.cl.msu.edu'" <drb@gopher.cl.msu.edu>,
"'Scott Lystig Fritchie'" <fritchie@MR.Net>
Cc: "'www-security@ns2.rutgers.edu'" <www-security@ns2.rutgers.edu>
Date: Thu, 10 Oct 1996 12:28:03 -0700
Errors-To: owner-www-security@ns2.rutgers.edu
The most up to date information can be found on
http://www.microsoft.com/frontpage. This has a link to the Microsoft
FrontPage Web Presence Providers Kit. Among the information there is a
whitepaper on Unix security and CGI (FrontPage server extensions are
just CGI apps.) That will probably answer all the questions that might
come up. If not, there's always email...
You can also get a free hard copy of the manual and a CD with the
example files by emailing fptech@microsoft.com.
Thanks,
Mike
>----------
>From: Scott Lystig Fritchie[SMTP:fritchie@MR.Net]
>Sent: Thursday, October 10, 1996 10:21 AM
>To: drb@gopher.cl.msu.edu
>Cc: www-security@ns2.rutgers.edu
>Subject: Re: FrontPage -- impressions?
>
>>>>>> On Wed, 09 Oct 96 15:05:45 -0500, Dennis Boone <drb@burrow.cl.msu.edu>
>>>>>>said:
>
>db> I recall some discussion of problems with the MS FrontPage server
>db> side extensions a couple of months ago. I didn't file the
>db> information at the time. We're suddenly getting requests for
>db> installation of same.
>
>See http://www.mr.net/~fritchie/frontpage.html for my rantings. Don't
>look at it if you aren't interested in an exploit script to modify the
>content of another FP-enabled virtual server on the same machine as
>yours. :-)
>
>-Scott
>---
>Scott Lystig Fritchie, Network Engineer MRNet Internet Services,
>Inc.
>fritchie@mr.net, PGP key #152B8725 Minnesota Regional Network
>v: 612/362.5820, p: 612/637.9547 2829 University Ave SE
>http://www.mr.net/~fritchie/ Minneapolis, MN 55414
>
