26 Jul 2004 | Print  |

WebSTAR Update Patches Vulnerabilities

by Mark H. Anbinder

WebSTAR Update Patches Vulnerabilities -- 4D, Inc. has released version 5.3.3 of its 4D WebSTAR Web, email, and FTP server suite to address reported vulnerabilities and add other enhancements. The update is free to all licensed WebSTAR V owners. WebSTAR versions 5.3.2 and earlier have a stack overflow vulnerability in their FTP service that could allow an attacker to gain administrative privileges by sending a long FTP command; a sample script included with WebSTAR could allow directory indexing of any directory on the server; and the Web server component could allow an attacker to download the php.ini files that might contain sensitive information such as the account name and password used by PHP to communicate with databases. All WebSTAR server administrators should update their servers to the latest version. 4D says the upgrade also offers improved spam filtering, with the addition of IP address whitelisting and the capability to filter messages pre-tagged with SpamAssassin headers. [MHA]

<http://www.4d.com/products/downloads_4dws.html>

-

Top Articles in this Section

• Apple Reveals New iPod nano and Updated iPod touch (09 Sep 08)
• iTunes 8 Adds Genius; iTunes Store Adds HD TV and NBC (09 Sep 08)
• Amazon Launches Mac-Compatible Video on Demand (08 Sep 08)

ConceptDraw Office adds real business power to Microsoft Office
and Apple's iWork. Whether you need project management, business
graphics, or mind mapping, it's all easily created on your Mac!
Buy today for only $499! <http://www.conceptdraw.com/tb>