Re: NOT SO - Huge Security holes in MS FrontPage 98

Damien Miller (dmiller@vitnet.com.sg)
Fri, 24 Oct 1997 13:43:54 +1000 (EST)

On Fri, 24 Oct 1997, Tom Worthington wrote:

> At 07:09 PM 23/10/97 +1000, Damien Miller wrote:
>
> >...Frontpage Extensions are a set of server-side programs which allow the
> >Microsoft Frontpage WWW editor to transparently manage content on a remote
> >site. They also include some basic CGI functionality (search form,
> >guest-book, etc)...
>
> Sounds useful, but do I have to use Frontpage to use Frontpage Extensions?
>
> That is, apart from Frontpage itself, are there client products available
> from other vendors which use Frontpage Extensions, or equivalent?

No. That is one of the problems.

> Is there a standard (or two) in the works to provide this sort of function?

FTP and HTTP both are standardised methods of transferrind documents. Many
other web authoring systems use these with great success.

If you mean the CGI functionality, there is nothing there that a few freely
available perl scripts could not do.

Regards,
Damien Miller

| "... the most serious problems in the Internet have been caused by
| unenvisaged mechanisms triggered by low-probability events; mere human
| malice would never have taken so devious a course!" - RFC 1122
|
| WWW: http://silicon.vitnet.com.sg
| PGP public key: send me an email with "send file pgp_key" as the subject