[security] New Macromedia Security Zone Bulletin

[Lorenzo Iannuzzi]

http://www.macromedia.com/go/DMJL_AACE

Dreamweaver's remote database connectivity for testing 
dynamic database-driven websites installs scripts that 
may reveal DSNs to outside attackers. A sophisticated 
attacker may also be able to use these scripts to send 
SQL commands to the server and gain control of the 
database server.
-- 

Ciao e alla prossima!
Lorenzo
-------------- parte successiva --------------
Un allegato non testuale è stato rimosso....
Nome:        non disponibile
Tipo:        application/pgp-signature
Dimensione:  244 bytes
Descrizione: non disponibile
Url:         http://itlists.org/pipermail/security/attachments/20040404/0e143e09/attachment.pgp