akoss
Administrator
Full Member
 Offline
Posts: 218
|
Vulnerability in Macromedia Dreamweaver
Security Alert, April 14, 2004
Vulnerability in Macromedia Dreamweaver
NGSSoftware discovered that Dreamweaver by default creates and
uploads a script to test remote database connectivity (mmhttpdb.asp)
to the database-driven Web site being tested. If left on the server,
the script can let a potential attacker access the back-end database
server without supplying a user ID and password. Macromedia has
released an alert about this vulnerability.
VERSIONS AFFECTED
Dreamweaver MX 2004 (all versions)
Dreamweaver MX (all versions)
Dreamweaver UltraDev 4 (all versions)
DESCRIPTION
Dreamweaver by default creates and uploads a script to test remote database connectivity (mmhttpdb.asp) to the database-driven Web site being tested. If left on the server, the script can let a potential attacker access to the back-end database server without supplying a user ID and password.
go to this website for more info. http://www.macromedia.com/devnet/security/.../mpsb04-05.html
|
Author
Logged