|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
Mime-Version: 1.0 Content-Type: text/plain Message-Id: <CA1AA37A93EFD211BE3900902745CD9E01E24401@ntsrv0.hasting.com> Date: Mon, 31 Jan 2000 11:20:26 -0600 Reply-To: "Cave, Glynis" <caveg@HASTINGS-ENT.COM> From: "Cave, Glynis" <caveg@HASTINGS-ENT.COM> X-To: BUGTRAQ@securityfocus.com To: BUGTRAQ@SECURITYFOCUS.COM Also, the IDQ.dll file properties do not show what MS indicates on their bulletin: "You've installed the patch correctly if IDQ.dll has the following properties... Date: January 26, 2000 Size: 193,296 bytes" Has anyone heard from Microsoft about this? > I apply the patch from Microsoft and it doesnt change the problem. I test > this after and the problem are the same > > *** WARNING **** > Even if you have no .htw files on your system you're probably > still vulnerable! A quick test to show if you are vulnerable: > go to http://YOUR_WEB_SERVER_ADDRESS_HERE/nosuchfile.htw > If you receive a message stating the "format of the QUERY_STRING > is invalid" you _are_ vulnerable. This test is to see if you're vulnerable _before_ you apply the patch. After you install the patch you _will_still get the same message.
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |