mailing list archives
@(#)Mordred Labs advisory - Texis sensitive information leak
From: sir.mordred () hushmail com
Date: Fri, 14 Mar 2003 14:39:36 -0800
-----BEGIN PGP SIGNED MESSAGE-----
//@(#) Mordred Security Labs advisory
Release date: March 15, 2003
Name: Texis sensitive information leak
Versions affected: all versions
Author: Sir Mordred (mordred () s-mail com, http://mslabs.iwebland.com)
Thunderstone is an independent R&D company that has been providing
high-performance state-of-the-art solutions to intelligent information retrieval and management problems for over 21
Their product, Texis, provides every full-text, SQL, multimedia management,
and dynamic publishing operation needed for an enterprise search application.
For more info please visit http://www.thunderstone.com/texis/site/pages
The texis program executes files written in Texis Web Script (aka Vortex),
a powerful web-server-side HTML programming language. It can be invoked
from the command line, or as a CGI program from the web server to run scripts.
By requesting a specially crafted urls, a very sensitive information about the system will be displayed.
Vendor contacted, no reply since.
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify
-----END PGP SIGNATURE-----
Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2
Big $$$ to be made with the HushMail Affiliate Program:
- @(#)Mordred Labs advisory - Texis sensitive information leak sir . mordred (Mar 14)