Bugtraq mailing list archives

Re: IIS still revealing paths for web directories


From: tobkin () JAWS UMN EDU (Chris Tobkin)
Date: Tue, 18 Jan 2000 15:38:56 -0600


To solve this problem check in the propierties of the web server
the option "Check that file exists", in
Home Directory/Application Settings/Configuration/App Mappings in
the Edit Window of the .ida and .idq extensions.
Both extensions are interpreted by idq.dll.

Unfortunately, if you are still running IIS 3.0, the "Check that file
exists" is not available.  If you are not using .idc files, then
you can remove the registry key and restart the server..

(HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\Script Map\.idc)

The offending dll is %SystemRoot%\system32\inetsrv\httpodbc.dll.

// chris
tobkin () umn edu

*************************************************************************
Chris Tobkin                                               tobkin () umn edu
Java and Web Services - Academic and Distributed Computing Services - UMN
Shep. Labs 190                                      Minneapolis, MN 55455
             ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
        "Nothing great was ever achieved without enthusiasm."
        - Ralph Waldo Emerson, poet, writer, and philosopher
*************************************************************************


Current thread: