[13395] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Antonio Ropero)
Mon Jan 17 20:39:04 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Message-Id: <002301bf5f5d$64c20f60$593b49d4@pegaso>
Date: Sat, 15 Jan 2000 14:35:30 +0100
Reply-To: Antonio Ropero <antonior@HISPASEC.COM>
From: Antonio Ropero <antonior@HISPASEC.COM>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Hi,
To solve this problem check in the propierties of the web server
the option "Check that file exists", in
Home Directory/Application Settings/Configuration/App Mappings in
the Edit Window of the .ida and .idq extensions.
Both extensions are interpreted by idq.dll.
Antonio Ropero
antonior@hispasec.com
HispaSec
http://www.hispasec.com
----- Original Message -----
From: Chris Tobkin <tobkin@SOFTWARE.UMN.EDU>
To: <BUGTRAQ@SECURITYFOCUS.COM>
Sent: miircoles 12 de enero de 2000 21:07
Subject: Re: [BUGTRAQ] IIS still revealing paths for web
directories
> > The same problem still exists on IIS4 (tested with SP5 -
didn't try on
> > SP6).
>
> Still exists as far back as IIS3 also. (SP6a)
>
> Error "The IDQ file x:\web_home_dir\anything.idq could not be
found. "
> (0xc000203e) encountered while processing the query
"<%CIRESTRICTION%>".
>
> // chris
> tobkin@umn.edu
>
>
*****************************************************************
********
> Chris Tobkin
tobkin@umn.edu
> Java and Web Services - Academic and Distributed Computing
Services - UMN
> Shep. Labs 190
Minneapolis, MN 55455
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> "Nothing great was ever achieved without enthusiasm."
> - Ralph Waldo Emerson, poet, writer, and philosopher
>
*****************************************************************
********
>