Santa Clara, Calif. - March 21, 2000 - Perfecto Technologies, the leading developer of Web application security management software, today released its latest Black Watch Labs advisory which reveals how some Infonautics' applications utilize the getdoc.cgi CGI in such a way that allows attackers to gain (read) access to a document they would otherwise have to pay in order to view. The number of sites affected can be found by viewing the list of Infonautics-based sites in the company's Web site. Some, not all, of the companies listed possess this vulnerability. The vendor has been notified of this vulnerability and there is no patch available at this time. For technical details of this problem, please visit https://www.perfectotech.com/blackwatch/.

About Black Watch Labs (www.perfectotech.com/blackwatch/)
Black Watch Labs is a research group operated by Perfecto Technologies Inc., the leader in Web Application Security Management. Black Watch Labs was established in order to further the knowledge of the Internet community in the arena of Web application security management. Black Watch Labs publishes security advisories regularly, which are maintained at https://www.perfectotech.com/blackwatch/, and are also posted to relevant security lists and Web sites. Black Watch Labs also operates a Web application security mailing list, which can be subscribed to at https://www.perfectotech.com/blackwatch/. For more info about Black Watch Labs and Web Application Security Management, please call (408) 855-9500 or email [email protected].