[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: qDefense Advisory: DCForum allows remote read/write/execute
> Solution:
>
> Patch dcboard.cgi to remove double dots and
poison nulls
>
> Disable uploading
Note that DCScripts released a security patch on
3/31/2001 designed to address these issues:
http://www.dcscripts.com/FAQ/sec_2001_03_31.html
-MZ
|