Advisory: TCP-Connection risk in DB4Web

[Stefan.Bagdohn () guardeonic com]

Hi all. It's me again.
The application server DB4Web is able to initiate TCP connections to
arbitrary ports/IPs and can possibly misused as a portscanner. Please see
the attached advisory for deatils and vendors statement.
regards,
 Stefan

Attachment: guardadv-02-2002-db4web-tcp-connect-bug.release.txt
Description: