Originally reported by Michal Zalewski, more information can be found via BugTraq ID 1599 . CGI scripts . Netauth web-based email , older versions could be used to read arbitrary files on the system. Downloading the current version is reported to fix this problem. Account Manager from the CGI Script Center also can be exploited to gain administrator privileges.
Patches are available and the latest version for download has been fixed.
Subscribe Me , also from CGI Script Center, contains a similar vulnerability. Patches and a fixed version are also available on the CGI Script Center website. Commercial products . BEA's Weblogix Proxy , a plug-in for Netscape Enterprise Server, IIS and Apache, contains multiple exploitable buffer overflows. An upgraded version has been made available.