 |
Santa
Clara, Calif. - May 5, 2000 - Perfecto Technologies, the leading
developer of Web application security management software, today
released its latest Black Watch Labs advisory that reveals how
Gossamer Threads DBMan script allows several environment variables
to be viewed by an attacker, who can gain useful information
on the site, making further attacks more feasible. DBMan dumps
useful information (e.g. script location, HTTP root, version
of Perl, server_admin, server_name, path) to the browser when
the database file provided is incorrect. For more information
go to https://www.perfectotech.com/blackwatch/.
About
Black Watch Labs (www.perfectotech.com/blackwatch/)
Black Watch Labs is a research group operated by Perfecto Technologies
Inc., the leader in Web Application Security Management. Black
Watch Labs was established in order to further the knowledge
of the Internet community in the arena of Web application security
management. Black Watch Labs publishes security advisories regularly,
which are maintained at https://www.perfectotech.com/blackwatch/,
and are also posted to relevant security lists and Web sites.
Black Watch Labs also operates a Web application security mailing
list, which can be subscribed to at https://www.perfectotech.com/blackwatch/.
For more info about Black Watch Labs and Web Application Security
Management, please call (408) 855-9500 or email [email protected].
About
Perfecto Technologies
Founded in 1997 and headquartered in Santa Clara, Calif., Perfecto
Technologies is the leader in Web Application Security
Management software. AppShield, Perfecto Technologies flagship
product, is the first to provide extreme security for
customer-facing applications in dynamic Web site environments.
Perfecto Technologies has customers in many sectors including,
banking, e-tailing, finance, government and healthcare. Privately
held, Perfecto Technologies is funded by blue-chip venture capital
firms and industry leaders, including Sequoia Capital, Walden
and Intel Corporation. More information about Perfecto Technologies
may be obtained by visiting the Company's Web site at www.perfectotech.com
or by calling the Company directly at (408) 855-9500.
#
# #
For Immediate Release
Contact:
Diane Fraiman
Perfecto Technologies, Inc.
(408) 855-9500
[email protected]
Kevin Pedraja
Sterling Communications
(408) 441-4100
[email protected]
|
