Full Disclosure mailing list archives

Re: iis cgi 0day

From: Reindl Harald <h.reindl () thelounge net>
Date: Wed, 16 Apr 2014 12:25:34 +0200


Am 16.04.2014 08:39, schrieb Davide Davini:

YiFei Yang wrote:

It is a bug affecting IIS4/5 using CGI on Windows NT/2000. Microsoft is
aware of it and won't fix it.


Is there any workaround this bug? I might be slow but I can't find any


just don't use unsupported OS versions if you care about
security - i know people even forgot NT/2000 existed

Attachment: signature.asc
Description: OpenPGP digital signature


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Current thread:

iis cgi 0day yuange (Apr 09)
- Message not available
  - Re: iis cgi 0day yuange (Apr 09)
- <Possible follow-ups>
- Re: iis cgi 0day YiFei Yang (Apr 10)
  - Message not available
    - Re: iis cgi 0day YiFei Yang (Apr 10)
  - Re: iis cgi 0day Davide Davini (Apr 16)
    - Re: iis cgi 0day Reindl Harald (Apr 16)
    - Re: iis cgi 0day Homer Parker (Apr 18)
    - Re: iis cgi 0day YiFei Yang (Apr 18)