Re: More fun with WWWBoard

1999-09-27 Thread Mark Jeftovic
At 11:50 AM 9/24/99 -0400, Speed wrote: >You know... alot of people here give Matt Write a hard time. On the one >hand, yeah, wwwboard is insecure. But maybe he simply doesn't have time >to deal with it anymore. > >Just accept that it is insecure / incomplete, and perhaps use one of the >other v

Re: More fun with WWWBoard

1999-09-25 Thread Speed
On Wed, 22 Sep 1999, Patrick Oonk wrote: > Matt Wright is one of the worst, but check out > http://www.ultimatebb.com/home/firsttimeinstall.html for a few > good laughs: You know... alot of people here give Matt Write a hard time. On the one hand, yeah, wwwboard is insecure. But maybe he simpl

Re: More fun with WWWBoard

1999-09-23 Thread Patrick Oonk
On Tue, Sep 21, 1999 at 03:51:09PM -0700, Mark Jeftovic wrote: > At 01:24 PM 9/20/99 +0100, Chris Ridd wrote: > >Does anyone maintain a list of WWWBoard bugs? (As Matt Wright clearly > >isn't interested...) > > > > Doesn't look like it. I posted a vulnerability in his guestbook script > to this l

Re: More fun with WWWBoard

1999-09-23 Thread Ben Laurie
Vladimir Dubrovin wrote: > > Hello Chris Ridd, > > 20.09.99 16:24, you wrote: More fun with WWWBoard; > > C> In Apache you'd configure this as follows: > > C> > C> deny from all > C> > > or put it in some directory inside your web home and c

Re: More fun with WWWBoard

1999-09-22 Thread Vladimir Dubrovin
Hello Chris Ridd, 20.09.99 16:24, you wrote: More fun with WWWBoard; C> In Apache you'd configure this as follows: C> C> deny from all C> or put it in some directory inside your web home and configure deny from all deny from all for this directory. It's m

Re: More fun with WWWBoard

1999-09-22 Thread Mark Jeftovic
At 01:24 PM 9/20/99 +0100, Chris Ridd wrote: >Does anyone maintain a list of WWWBoard bugs? (As Matt Wright clearly >isn't interested...) > Doesn't look like it. I posted a vulnerability in his guestbook script to this list about 2 years ago (ironically entitled "Guestbook script is still vulnera

Re: More fun with WWWBoard

1999-09-21 Thread Chris Ridd
On Fri, 17 Sep 1999 05:09:38 PDT, David Weins wrote: > Since I didn't see any of this mentioned in any of the archieved WWWBoard > articles from bugtraq, I decidied to send it in. [...] Does anyone maintain a list of WWWBoard bugs? (As Matt Wright clearly isn't interested...) > If you haven't l

More fun with WWWBoard

1999-09-17 Thread David Weins
Since I didn't see any of this mentioned in any of the archieved WWWBoard articles from bugtraq, I decidied to send it in. Possible Compromise: Remote Administration of WWWBoard. --- By following WWWBoards install instructions exactly, you can