[PEN-TEST] CmdAsp.asp

[Andrew Oman <Andrew.Oman () PREDICTIVE COM>]

Does anyone have any insights on the CmdAsp.asp exploit ? (details at http://www.dogmile.com/files/#CmdAsp)
This exploit was posted on bugtraq and I can't get it to do anything. I am
running it on a vanilla IIS install (IIS 4.0 sp 6 ) and as far as I
understand it, I should at least have IUSR privilege for command
execution. Any advice would be appreciated. This would be a nice little
tool in conjunction with the unicode exploit ( to get it up there).
Thanks,
Andrew