Bugtraq mailing list archives
Re: Personal web server
From: mikehow () MICROSOFT COM (Michael Howard)
Date: Tue, 19 Jan 1999 13:51:48 -0800
the frontpage team are looking at it now - as sean noted, the iis codebase in pws does not have this issue. i'll fwd more info to this alias as soon as i get more info from the fp team. Cheers, MH IIS Security -----Original Message----- From: Sean Coates [mailto:sean () SPATULA ML ORG] Sent: Monday, January 18, 1999 10:13 AM To: BUGTRAQ () NETSPACE ORG Subject: Re: Personal web server kiborg wrote:
Hello, Sorry if this has already been known. But i didn't find something of the sort. While playing with Microsoft Personal Web Server (Frontpage-PWS32/3.0.2.926). I found that the following URL will list the root directory and be able to download any file you want. http://www.victim.com/....../
That seems to be fixed in the windows98 version of PWS (http://24.231.6.49/....../ returns server error 161) Sean Coates scoates () usa net sean () spatula ml org
Current thread:
- Re: Personal web server kiborg (Jan 18)
- <Possible follow-ups>
- Re: Personal web server Sean Coates (Jan 18)
- Re: Personal web server Aleph One (Jan 19)
- Bug in IIS and PWS but only for Windows 9x. Re: Personal web Victor Lavrenko (Jan 20)
- Re: Bug in IIS and PWS but only for Windows 9x. Re: Personal web Marc Slemko (Jan 20)
- Bug in IIS and PWS but only for Windows 9x. Re: Personal web Victor Lavrenko (Jan 20)
- Re: Personal web server Michael Howard (Jan 19)
- Re: Personal Web Server Fredrick Moore (Jan 19)
- Re: Personal web server Sean Coates (Jan 19)
- Re: Personal web server Aleph One (Jan 20)
- Re: Personal web server Aleph One (Jan 20)
- Re: Personal web server Steven M. Bellovin (Jan 20)
- Re: Personal web server Aleph One (Jan 21)
- Re: Personal Web Server Ian O'Friel (Jan 22)
- Re: Personal Web Server Eric Stevens (Jan 24)
- Re: Personal Web Server Tris (Jan 24)