[13410] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Niklas Schiffler)
Tue Jan 18 13:06:05 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <38846E63.8E800666@nightlabs.de>
Date: Tue, 18 Jan 2000 14:45:07 +0100
Reply-To: Niklas Schiffler <nick@NIGHTLABS.DE>
From: Niklas Schiffler <nick@NIGHTLABS.DE>
X-To: Bugtraq <bugtraq@securityfocus.com>
To: BUGTRAQ@SECURITYFOCUS.COM
Please filter this if outdated.
I coulnd't find anything about CERN httpd 3.0 revealing paths in
the archives.
http://www.victim.com/cgi-bin/ls
results in:
Bad script request -- neither '/usr/local/etc/ls' nor '/usr/local/etc/ls.pp' is executable
http://www.victim.com/cgi-bin/cat
results in:
Bad script request -- neither '/usr/local/etc/cat' nor '/usr/local/etc/cat.pp' is executable
Greetings,
Nick
