Re: IIS still revealing paths for web directories

[Eric.Stevens () AVENTIS COM (Eric.Stevens () AVENTIS COM)]

it would seem not to work on IIS4, SP6.  I get http 500 - Internal Server
Error.

-----Original Message-----
From: Vanja Hrustic [mailto:vanja () relaygroup com]
Sent: Monday, January 10, 2000 2:43 PM
To: BUGTRAQ () SECURITYFOCUS COM
Subject: IIS still revealing paths for web directories

This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.

Request: http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.

Request: http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.

Microsoft is running IIS5

The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).

It's not really a big deal, but they should fix it.

--

Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time