[17268] in bugtraq
Re: Microsoft Security Bulletin (MS00-078)
daemon@ATHENA.MIT.EDU (Luiz Lima)
Thu Oct 19 13:32:32 2000
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-ID: <005e01c0390d$a1cd0560$0576e0c8@imagelink.com.br>
Date: Wed, 18 Oct 2000 12:13:47 -0200
Reply-To: Luiz Lima <llima@IMAGELINK.COM.BR>
From: Luiz Lima <llima@IMAGELINK.COM.BR>
To: BUGTRAQ@SECURITYFOCUS.COM
Ok... So I've applied the patch to my English version NT Server 4.0 SP6a.
Now it seems that I can't access directories with dots on their names.
To make it happen, simply create a folder named test.com on your web folder.
If you try to access it (http://localhost/test.com) the server returns
"listing not allowed". Well, that was expected. Now, create a simple
index.htm or index.asp and out it inside there and try again: 404 - Not
found.
It also seems not to be related to the default document loading because if
you create a bogus.htm file and try to get it
(http://localhost/test.com/bogus.htm) it won't come either. A "not found"
error is all you'll get.
I've tried on three different servers (with ver simillar configuration,
however) and they all behaved the same way.
Anybody with this behavior?
---
Luiz Lima
Image Link Internet
http://www.imagelink.com.br
