<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.0.4630.0">
<TITLE>The WebConnect 6.4.4 and 6.5 contains several vulnerabilities</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">The WebConnect 6.4.4 and 6.5 contains several vulnerabilities such as: </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - Denial of Service when requesting an DOS Device in Path Name </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - Reading of files outside webroot (Directory traversal)</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Requesting "DOS Device in Path Name" Denial of Service</FONT>
<BR><FONT SIZE=2 FACE="Arial">When requesting a DOS device in the URL the server will stop responding </FONT>
<BR><FONT SIZE=2 FACE="Arial">to any further requests before a manual restart of service has been made. </FONT>
<BR><FONT SIZE=2 FACE="Arial">This attack can be preformed on both the client website and the </FONT>
<BR><FONT SIZE=2 FACE="Arial">administration interface. </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Vulnerable versions: </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - WebConnect 6.4.4 (Possible previous versions) </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - WebConnect 6.5 </FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial">CERT response: </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - VU#552561 CAN-2004-0466 </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial">Reading of files outside webroot (Directory traversal) </FONT>
<BR><FONT SIZE=2 FACE="Arial">When sending a specially crafted request to the server it is possible to </FONT>
<BR><FONT SIZE=2 FACE="Arial">read files outside the webroot. Since the service as default runs with </FONT>
<BR><FONT SIZE=2 FACE="Arial">system rights, this could give access to the entire partition that WebConnect </FONT>
<BR><FONT SIZE=2 FACE="Arial">are installed on. </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Vulnerable versions:</FONT>
<BR><FONT SIZE=2 FACE="Arial"> - WebConnect 6.4.4 (Possible previous versions) </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">CERT response: </FONT>
<BR><FONT SIZE=2 FACE="Arial"> - VU#628411 CAN-2004-0465</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial">Read the full advisory for both the vulnerabilities at:</FONT>
<BR><A HREF="http://www.cirt.dk/"><U><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">http://www.cirt.dk/</FONT></U></A>
</P>
</BODY>
</HTML>