Joined: 22 Mar 2002
|Posted: Sun May 11, 2003 1:54 am Post subject: Maintenance release of Abyss Web Server X1 available
|May 11, 2003: Maintenance release available
Aprelium Technologies is pleased to announce the availability of a maintenance release of Abyss Web Server X1 Update 1 (Version 1.1.5). This new version fixes a vulnerability discovered recently and adds some minor enhancements.
It is imperative that any old installation of Abyss Web Server be upgraded immediately.
For upgrade instructions and more information about this version, please read http://www.aprelium.com/news/abws115.html .
More about the fixed vulnerability
Previous versions of Abyss Web Server X1 can allow a user sending a malformed URL with multiple leading and trailing slashes to bypass password access controls for protected directories.
Aprelium Technologies thanks Brad Nelson (USA) for his notification about a vulnerability he discovered in version 1.1.4.
Aprelium - http://www.aprelium.com