[13366] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Jonah Kowall)
Sat Jan 15 02:48:41 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="windows-1252"
Message-Id: <8F04455EA3A3D21195A600104B72E3861E0043@yap.cinteractive.com>
Date: Wed, 12 Jan 2000 12:34:50 -0500
Reply-To: Jonah Kowall <jkowall@CINTERACTIVE.COM>
From: Jonah Kowall <jkowall@CINTERACTIVE.COM>
X-To: "BUGTRAQ@SECURITYFOCUS.COM" <BUGTRAQ@SECURITYFOCUS.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
I cannot replicate this on my IIS 4 or 5 Servers.
-----Original Message-----
From: Vanja Hrustic [mailto:vanja@RELAYGROUP.COM]
Sent: Monday, January 10, 2000 2:43 PM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: IIS still revealing paths for web directories
This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.
Request : http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.
Request : http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.
Microsoft is running IIS5
The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).
It's not really a big deal, but they should fix it.
--
Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time
