Bugtraq mailing list archives

Re: IIS still revealing paths for web directories


From: vlad () SANDY RU (Vladimir Dubrovin)
Date: Wed, 12 Jan 2000 21:48:13 +0300


Hello Vanja Hrustic,

10.01.2000 22:42, you wrote: IIS still revealing paths for web directories;

V> Request : http://www.microsoft.com/anything.ida
V> Response: The IDQ file d:\http\anything.ida could not be found.

V> The same problem still exists on IIS4 (tested with SP5 - didn't try on
V> SP6).

V> It's not really a big deal, but they should fix it.

IIS4+SP6 is not vulnerable - reply is ERROR 404.

  +=-=-=-=-=-=-=-=-=+
  |Vladimir Dubrovin|
  | Sandy Info, ISP |
  +=-=-=-=-=-=-=-=-=+


Current thread: