---------------------------------------------------------
From: Miva Support [mailto:support@miva.com]
Sent: Thursday, August 09, 2001 3:16 AM
Subject: MIVA SECURITY ISSUE - IMPORTANT!
---------------------------------------------------------

ATTENTION MIVA MERCHANT USERS:
SECURITY ISSUE - IMPORTANT!

Miva has recently learned of a security issue in the 3.91 release
of the Miva engine that runs your Miva Merchant storefront.  Miva
has contacted hosting providers and licensees of the engine with
urgent instructions on how to fix the security problem.  The
security problem with the 3.91 Miva engine creates a security hole
in Miva Merchant.

You do not need to contact Miva, your host, or system admistrator
unless the following test identifies that you are running a 3.91
release of the Miva engine:

1. Log into your Miva Merchant Administration.
2. Click on About Miva Merchant.
3. Read the Miva Engine version number.

YOU ARE AT RISK ONLY IF YOUR SERVER IS RUNNING A 3.91 RELEASE
OF THE MIVA ENGINE.  Previous versions and later versions are not
affected.  Again, if your server is running any version other than
3.91 you are not at risk and no further action is necessary.

If your server is running Miva Empresa v3.91, Miva recommends that you
switch your Miva Merchant storefront to maintenance mode. This will
temporarily make your store inaccessible to the public, but will help
protect you from security risks. Your host is already in the process
of upgrading your servers with Miva Empresa v3.92. You should verify
your Miva Empresa version number periodically, following the above
steps, as it may be upgraded at any time. Once your server is running
Miva Empresa v3.92 or higher you are no longer at risk and you should
switch your storefront back to active mode.

If you manage your own server or operate in a dedicated server
environment and have not received a Miva Empresa update notice,
then please contact Miva immediately for instructions.

This solution will fix the identified security risk.  No additional
steps are available or necessary. If you have any questions or
concerns, please contact Miva Technical Support:
mailto:support@miva.com.

Thank you for your prompt attention to this issue.

Miva Corporation
Technical Support
support@miva.com