Bugtraq mailing list archives

Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability

From: "David F. Skoll" <dfs () ROARINGPENGUIN COM>
Date: Tue, 20 Mar 2001 11:27:57 -0500

On Mon, 19 Mar 2001, Microsoft Security Response Center wrote:

Personal Web Server is, of course, not intended to host web sites on the
Internet.  It's only intended to be used in protected environments such
as home networks and the like.  If you're hosting an Internet site, IIS
is the appropriate product to use.


Not according to Georgi Guninski.

It's a rather feeble excuse to dismiss bug reports in this manner.  Even
a server for so-called "protected" environments should have its bugs fixed.

--
David.

Current thread:

Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability Dinos Pastos (Mar 19)
- <Possible follow-ups>
- Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability Microsoft Security Response Center (Mar 20)
  - Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability Dinos Pastos (Mar 20)
  - Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability David F. Skoll (Mar 20)
  - Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability Michael Brennen (Mar 21)
  - Re: Microsoft - Personal Web Server Extended UNICODE Directory Traversal Vulnerability Robert Bihlmeyer (Mar 21)