Penetration Testing mailing list archives

Re: [PEN-TEST] ISS not detecting unicode bug??


From: Claudio Pino <cpino () ORION CL>
Date: Thu, 16 Nov 2000 16:20:03 -0600

PEN-TEST () SECURITYFOCUS COM writes:
John,

Can you tell me how you know the hole exists?  And I've got to ask the
obvious..are you sure nothing was changed on the server before the ISS
scan?


-Jim
I made the same test over an IIS 4 with the problem and IS. detected the
problem.

 _______________________________
 Atte,
 Claudio Pino P.
 Email:cpino () orion cl
 fono: 6403900 / Fax: 6403990
 Orion 2000
Servicios Profesionales en Seguridad Informática


Current thread: