Subscribe Me Vulnerability

Product: Subscribe Me
Versions: ALL version numbers LITE only
OS: Unix and Winnt
Vendor: Notified, http://www.cgiscriptcenter.com/

The Problem:

Yet again the script allows a remote user to overwrite the Admin Passwd file with

any password they see fit. Therefore giving them Admin access to the Maillist Script

Exploit:

See the .zip file Attached

Patches:

Already Available see website, download version is patched.

n30
[email protected]
www.alldas.de