Bugtraq mailing list archives
Enumerate Root Web Server Directory Vulnerability for IIS 4.0
From: jason () SPIS NET (Jason Lutz)
Date: Thu, 9 Mar 2000 09:32:07 -0600
BugTraq, I was recently auditing the security on one of my web servers when I came across a new Extension Enumerate Root Web Server Directory Vulnerability for IIS 4.0. Going to the main website and asking for anything.idq I get the page cannot be found. But if the files for the web server reside on a share the full network path is found. The Exploit: On the shared network drive, http://server/anything.idq The file \\share\wwwroot\inetpub\webpage\*.idq is on a network share. IDQ, IDA and HTX files cannot be placed on a network share. Tested on Windows NT 4.0 Service Pack 5 and 6a I would like to say thank you to rain.forest.puppy. for all of his help. props out to ADM, Wiretrip, w00w00 and l0pht. Jason Lutz Sprint Print Inc jason () spis net
Current thread:
- Microsoft Security Bulletin (MS00-018, (continued)
- Microsoft Security Bulletin (MS00-018 Microsoft Product Security (Mar 20)
- Re: a few bugs ... Coke (Mar 20)
- Re: a few bugs ... Daniel Jacobowitz (Mar 20)
- Re: a few bugs ... Michal Zalewski (Mar 20)
- DoS with NAVIEG PAUL VanDyke (Mar 17)
- [ANNOUNCE] strace for NT tsabin () RAZOR BINDVIEW COM (Mar 13)
- Linux patch for blocking buffer overflow based attacks massimo () IAC RM CNR IT (Mar 10)
- ICQ remote DoS Philip Stoev (Mar 10)
- TESO advisory -- atsadc krahmer () CS UNI-POTSDAM DE (Mar 11)
- Re: [ Hackerslab bug_paper ] Linux printtool get printer passwor Brian Knotts (Mar 13)
- Enumerate Root Web Server Directory Vulnerability for IIS 4.0 Jason Lutz (Mar 09)
- Re: Enumerate Root Web Server Directory Vulnerability for IIS 4.0 Chris Paget (Mar 17)
- SQL Server Vulnerability details Chip Andrews (Mar 18)
- Re: PGP Signatures security BUG! Florian Weimer (Mar 10)
- Re: PGP Signatures security BUG! Will Price (Mar 20)
- Esafe Protect Gateway (CVP) does not scan virus under some conditions Hugo.van.der.Kooij () CAIW NL (Mar 21)
- Re: Esafe Protect Gateway (CVP) does not scan virus under some conditions Alon Rotem (Mar 24)
- Security bug in Apache project: Jakarta Tomcat Jan Madsen (Mar 21)
- [TL-Security-Announce] nmh-1.0.2 and earlier TLSA200008-1 Katie Moussouris (Mar 21)
- New Solaris Vulnerability Calculator, Sun Mailing list, and Sun Focus area from SecurityFocus.com Jeremy Rauch (Mar 13)
- Re: PGP Signatures security BUG! Tobias Haustein (Mar 08)