Bugtraq mailing list archives

Re: Tumbleweed Worldsecure (MMS) BLANK 'sa' account password vuln erability


From: JD Conley <jdc () MALIBUBOATS COM>
Date: Fri, 11 Aug 2000 14:32:05 -0700

Tumbeweed refuses to acknowledge this vulnerability, which
caused major outrage
among my customers.  Therefore, I have no choice but to go
public about this
vulnerability.

It seems the post to BUGTRAQ lit a fire under Tubleweed.  In today's
technical bulletin they linked to a patch for the vulnerabilty here:

http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm


Current thread: