[9110] in bugtraq
Re: Personal web server
daemon@ATHENA.MIT.EDU (Sean Coates)
Mon Jan 18 15:24:16 1999
Date: Mon, 18 Jan 1999 14:12:32 -0400
Reply-To: scoates@usa.net
From: Sean Coates <sean@SPATULA.ML.ORG>
X-To: kiborg <contact@kiborg.net>
To: BUGTRAQ@NETSPACE.ORG
kiborg wrote:
> Hello,
>
> Sorry if this has already been known. But i didn't find something of the
> sort.
> While playing with Microsoft Personal Web Server
> (Frontpage-PWS32/3.0.2.926).
> I found that the following URL will list the root directory and be able to
> download any file you want.
> http://www.victim.com/....../
>
That seems to be fixed in the windows98 version of PWS
(http://24.231.6.49/....../ returns server error 161)
Sean Coates
scoates@usa.net
sean@spatula.ml.org
