Bugtraq: webplus security hole

[TalentSoft.Support () EXCHANGE TALENTSOFT COM (TalentSoft.Support)]

This email is sent to advise all users of webplus having a build prior to
512 that there has been a reported security problem. In the url, if running
webplus as the user 'root', it is possible to use the '..' command to
traverse directories on the server. This technique can be used to view
proprietary files on the web server. This problem has been corrected in
builds of webplus after 512. For those who need the upgraded binary, you can
either contact support () talentsoft com for a link to the patch, or obtain the
patch from the web site (www.talentsoft.com). The security advisory section
of the web site is currently under construction, but should be completed
very soon.

Thank You
Technical Support
talentsoft