[13376] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Vanja Hrustic)
Mon Jan 17 15:12:46 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <388040AA.21341BF4@relaygroup.com>
Date: Sat, 15 Jan 2000 16:40:58 +0700
Reply-To: vanja@relaygroup.com
From: Vanja Hrustic <vanja@RELAYGROUP.COM>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Eric.Stevens@aventis.com wrote:
>
> it would seem not to work on IIS4, SP6. I get http 500 - Internal Server
> Error.
Right.
I have just applied SP6a to the IIS 4 server (where I have reproduced
this first). The problem still exists. Only SP3/SP5/SP6a (in that
order) have been applied - no hotfixes at all.
Probably some of the hotfixes have solved this problem, but that has not
been included in SP6a. I give up, since I don't know how to disable this
'feature', and don't have time to play with it either. I'd be happy if
someone from Microsoft would give us a clue (the problem still exists on
their site, so...)
Thanks.
--
Vanja Hrustic
SAFER Editor
SAFER - free monthly security newsletter
Subscriptions at http://safer.siamrelay.com
