• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Focus On: Vista
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns

• info
• discussion
• exploit
• solution
• references

Progress WebSpeed Administration Utility Configuration Vulnerability

Progress WebSpeed is an Internet Transaction Processing (ITP) web application which allows for database connectivity and transaction management.

The WEbSpeed WSISA Messenger Administration Utility is remotely accessible from any web browser. This utility displays sensitive web server statistics and grants capabilities to administer certain functions of the web server, and can be accessed without any authentication requirements whatsoever.

The WebSpeed WSISA Messenger Administration Utility cannot be disabled through the program itself even though it gives you an option to do so through the Java GUI interface.