Microsoft Content Management Server 2001 Arbitrary Upload Location Vulnerability

Solution:
If web authoring functionality is not required, it may be disabled through the MCMS Server Configuration Application. Administrators should select the 'Web' tab, press the 'configure' button, and set 'Without Authoring' to true.

An update is available:


Microsoft Content Management Server 2001

Microsoft Content Management Server 2001 SP1


 

Privacy Statement
Copyright 2010, SecurityFocus