Microsoft FrontPage PWS Directory Traversal Vulnerability

Solution:
Microsoft has provided patches for this issue, available at:

Personal Web Server:
http://support.microsoft.com/download/support/mslfiles/Pwssecup.exe

Front Page 98:
http://officeupdate.microsoft.com/downloadDetails/fppws98.htm

Front Page 97:
Upgrade tp PWS4.0, available at:
/http://www.microsoft.com/windows/ie/pws/default.htm
Then apply the patch at
http://support.microsoft.com/download/support/mslfiles/Pwssecup.exe
If remote authoring support is required, you will need to apply new extensions, modify an .ini file, and apply a different patch. Full directions are available in Knowledge Base article Q217765, available at:
http://support.microsoft.com/support/kb/articles/Q217/7/65.ASP

For more details on which patch to apply, see the advisory (linked to in the credit section)



 

Privacy Statement
Copyright 2010, SecurityFocus