Bugtraq mailing list archives

Re: Active Perl path reveal


From: alan fong <alan.fong () city ottawa on ca>
Date: 31 Dec 2001 17:31:10 -0000


In-Reply-To: <20011229185339.24430.qmail () mail securityfocus com>

Any extension that IIS maps to C:\perl\bin\Perl.exe 
causes this problem (not necessarily .pl).

You can define a custom error page for 502 errors to 
hide your path. 

You can also map to C:\perl\bin\PerlIS.dll  but there 
are some differences so don't blame me if anything 
blows up.

Cheers.


Current thread: