[13352] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Eric.Stevens@AVENTIS.COM)
Fri Jan 14 22:50:32 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="windows-1252"
Message-Id: <AA1266092DDDD11197A20000F84A81B801EB6635@clvex04.clv.rpr.rp>
Date: Thu, 13 Jan 2000 11:17:38 -0500
Reply-To: Eric.Stevens@AVENTIS.COM
From: Eric.Stevens@AVENTIS.COM
X-To: vanja@relaygroup.com, BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
it would seem not to work on IIS4, SP6. I get http 500 - Internal Server
Error.
-----Original Message-----
From: Vanja Hrustic [mailto:vanja@relaygroup.com]
Sent: Monday, January 10, 2000 2:43 PM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: IIS still revealing paths for web directories
This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.
Request : http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.
Request : http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.
Microsoft is running IIS5
The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).
It's not really a big deal, but they should fix it.
--
Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time
