Bugtraq mailing list archives

IIS still revealing paths for web directories


From: vanja () RELAYGROUP COM (Vanja Hrustic)
Date: Tue, 11 Jan 2000 02:42:31 +0700


This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.

Request: http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.

Request: http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.

Microsoft is running IIS5

The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).

It's not really a big deal, but they should fix it.

--

Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time



Current thread: