Bugtraq mailing list archives
Re: IIS still revealing paths for web directories
From: btellier () USA NET (Brock Tellier)
Date: Tue, 18 Jan 2000 11:03:09 CST
BTW, different error messages are given depending on whether or not the path up to the idq file exists. In my brief testing: http://www.example.com/exists/bah.ida yields The IDQ file C:\Inetpub\wwwroot\exists\bah.ida could not be found. http://www.example.com/doesntexist/bah.ida yields File C:\Inetpub\wwwroot\doesntexist\bah.ida. The system cannot find the path specified. Brock Tellier UNIX Systems Administrator Chicago, IL, USA btellier () usa net Frank Knobbe at Home <FKnobbe () HOME COM> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1-----Original Message----- From: Chris Tobkin [mailto:tobkin () SOFTWARE UMN EDU] Sent: Wednesday, January 12, 2000 2:08 PMThe same problem still exists on IIS4 (tested with SP5 -didn't try onSP6).Still exists as far back as IIS3 also. (SP6a)Can't reproduce the problem with IIS3 and SP6. BTW: I'm running IIS3 on several servers without problems. I did not want to upgrade to IIS4 due to the complexity of its internal processes (and all those exploits that followed). My main complaint is still that I do not want to run IIS under the system account as IIS4 requires. Anyway, a time will come when we need to upgrade to W2K and IIS5. Does anyone have a comparison or analysis of IIS5 in respect to security (data channels, posting acceptors, etc)? Regards, Frank -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.1 Comment: PGP or S/MIME (X.509) encrypted email preferred. iQA/AwUBOIFcCURKym0LjhFcEQI+XwCeM4vv5ILglddvWw1LIWYBNOPifSEAoJ7z /+V1C97k2f+QTjNw9YGgmA90 =qq7D -----END PGP SIGNATURE-----
____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1
Current thread:
- Re: IIS still revealing paths for web directories Jonah Kowall (Jan 12)
- <Possible follow-ups>
- SV: IIS still revealing paths for web directories Kristoffer Ustad (Jan 13)
- Re: IIS still revealing paths for web directories Eric.Stevens () AVENTIS COM (Jan 13)
- Re: IIS still revealing paths for web directories Vanja Hrustic (Jan 15)
- Re: IIS still revealing paths for web directories Rob Systhine (Jan 14)
- Re: IIS still revealing paths for web directories Frank Knobbe at Home (Jan 15)
- Re: IIS still revealing paths for web directories Niklas Schiffler (Jan 18)
- IIS still revealing paths for web directories Michael Howard (Jan 17)
- Re: IIS still revealing paths for web directories Brock Tellier (Jan 18)
- Re: IIS still revealing paths for web directories Kevin Matthew (Jan 19)
- Re: IIS still revealing paths for web directories Michael Howard (Jan 20)