[20702] in bugtraq
Re: IIS Decode
daemon@ATHENA.MIT.EDU (Brian)
Fri May 18 05:26:42 2001
Message-ID: <023501c0deec$36975770$0b01a8c0@home2k>
From: "Brian" <bsshuhart@onemain.com>
To: "Michael Vassiliadis" <mikvas@timewarp.co.uk>, <bugtraq@securityfocus.com>
Date: Thu, 17 May 2001 12:12:46 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Yep, it works on IIS 3.0. At least the server I tested. I was verifing the
vulnerability for a friend at a remote site, so I don't know what patch
level of the system.
bs
----- Original Message -----
From: "Michael Vassiliadis" <mikvas@timewarp.co.uk>
To: <bugtraq@securityfocus.com>
Sent: Wednesday, May 16, 2001 11:52 PM
Subject: IIS Decode
> There has been so much talk about this new "diamond" from m$, but NOONE
> discovered that this also works on IIS 3!!!.....
>
> Please confirm...
>
