[12793] in bugtraq
Re: Ultimate Bulletin Board v5.3x? Bug
daemon@ATHENA.MIT.EDU (William Daskaluk)
Wed Dec 1 13:50:51 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <001101bf3b73$70867100$09a932cc@redmage>
Date: Tue, 30 Nov 1999 15:42:36 -0500
Reply-To: redmage@BESTNET.ORG
From: William Daskaluk <redmage@BESTNET.ORG>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
From the ultimatebb homepage installation instructions:
D) Create a Members directory. All of the files in the Members folder of
your ZIP file should be stored in another directory on your web server. You
should create a new directory called "Members" on your web server to store
these Members CGI files. It is imperative that you name this directory
Members (exactly); otherwise, the UBB will not function properly. You should
place this directory either as a subdirectory of your CGI directory or above
the web root, for security reasons. Once you have created this new
directory, upload all of the files in the Members folder into it. These
files must be uploaded in ASCII mode, not BINARY.
So to fix this bug, all one has to do is place the Members directory outside
the web root.
----- Original Message -----
From: Sean Malloy <sean@EMAX.COM.AU>
To: <BUGTRAQ@SECURITYFOCUS.COM>
Sent: Monday, November 29, 1999 7:08 PM
Subject: Ultimate Bulletin Board v5.3x? Bug
How to fix? change the members path to something more like
xvc83nx9wy4nd0w74m3. That will solve it
