[13370] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Vladimir Dubrovin)
Sat Jan 15 03:31:17 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <13908.000112@sandy.ru>
Date: Wed, 12 Jan 2000 21:48:13 +0300
Reply-To: Vladimir Dubrovin <vlad@sandy.ru>
From: Vladimir Dubrovin <vlad@SANDY.RU>
X-To: Vanja Hrustic <vanja@RELAYGROUP.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <387A3627.269DB1D4@relaygroup.com>
Hello Vanja Hrustic,
10.01.2000 22:42, you wrote: IIS still revealing paths for web directories;
V> Request : http://www.microsoft.com/anything.ida
V> Response: The IDQ file d:\http\anything.ida could not be found.
V> The same problem still exists on IIS4 (tested with SP5 - didn't try on
V> SP6).
V> It's not really a big deal, but they should fix it.
IIS4+SP6 is not vulnerable - reply is ERROR 404.
+=-=-=-=-=-=-=-=-=+
|Vladimir Dubrovin|
| Sandy Info, ISP |
+=-=-=-=-=-=-=-=-=+
