Re: IIS still revealing paths for web directories

[jkowall () CINTERACTIVE COM (Jonah Kowall)]

I cannot replicate this on my IIS 4 or 5 Servers.

-----Original Message-----
From: Vanja Hrustic [mailto:vanja () RELAYGROUP COM]
Sent: Monday, January 10, 2000 2:43 PM
To: BUGTRAQ () SECURITYFOCUS COM
Subject: IIS still revealing paths for web directories

This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.

Request: http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.

Request: http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.

Microsoft is running IIS5

The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).

It's not really a big deal, but they should fix it.

--

Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time