[13425] in bugtraq
Re: IIS still revealing paths for web directories
daemon@ATHENA.MIT.EDU (Chris Tobkin)
Wed Jan 19 13:12:11 2000
Message-Id: <Pine.SOL.3.95.1000118153344.24659z@moby.jaws.umn.edu>
Date: Tue, 18 Jan 2000 15:38:56 -0600
Reply-To: Chris Tobkin <tobkin@JAWS.UMN.EDU>
From: Chris Tobkin <tobkin@JAWS.UMN.EDU>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <002301bf5f5d$64c20f60$593b49d4@pegaso>
> To solve this problem check in the propierties of the web server
> the option "Check that file exists", in
> Home Directory/Application Settings/Configuration/App Mappings in
> the Edit Window of the .ida and .idq extensions.
> Both extensions are interpreted by idq.dll.
Unfortunately, if you are still running IIS 3.0, the "Check that file
exists" is not available. If you are not using .idc files, then
you can remove the registry key and restart the server..
(HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\Script Map\.idc)
The offending dll is %SystemRoot%\system32\inetsrv\httpodbc.dll.
// chris
tobkin@umn.edu
*************************************************************************
Chris Tobkin tobkin@umn.edu
Java and Web Services - Academic and Distributed Computing Services - UMN
Shep. Labs 190 Minneapolis, MN 55455
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
"Nothing great was ever achieved without enthusiasm."
- Ralph Waldo Emerson, poet, writer, and philosopher
*************************************************************************
