OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq Archives: Re: IIS still revealing paths for web directo

Re: IIS still revealing paths for web directories

Subject: Re: IIS still revealing paths for web directories
From: Eric.StevensAVENTIS.COM
Date: Thu Jan 13 2000 - 10:17:38 CST

it would seem not to work on IIS4, SP6. I get http 500 - Internal Server
Error.

-----Original Message-----
From: Vanja Hrustic [mailto:vanjarelaygroup.com]
Sent: Monday, January 10, 2000 2:43 PM
To: BUGTRAQSECURITYFOCUS.COM
Subject: IIS still revealing paths for web directories

This has been mentioned before, but it's probably good to remind
Microsoft about some outstanding issues.

Request : http://www.microsoft.com/anything.ida
Response: The IDQ file d:\http\anything.ida could not be found.

Request : http://www.microsoft.com/anything.idq
Response: The IDQ file d:\http\anything.idq could not be found.

Microsoft is running IIS5

The same problem still exists on IIS4 (tested with SP5 - didn't try on
SP6).

It's not really a big deal, but they should fix it. 

--

Vanja Hrustic
The Relay Group
http://relaygroup.com
Technology Ahead of Time

This archive was generated by hypermail 2b27 : Fri Jan 14 2000 - 23:58:40 CST