Re: IIS still revealing paths for web directories

Subject: Re: IIS still revealing paths for web directories
From: Vanja Hrustic (vanjaRELAYGROUP.COM)
Date: Sat Jan 15 2000 - 03:40:58 CST

• Next message: Anthony Benjamin: "Re: MS IIS 5.0 Access Violation on handling URL String"
• Previous message: Max Vision: "Re: Anyone can take over virtually any domain on the net..."
• In reply to: Eric.StevensAVENTIS.COM: "Re: IIS still revealing paths for web directories"
• Next in thread: Chris Tobkin: "Re: IIS still revealing paths for web directories"
• Reply: Vanja Hrustic: "Re: IIS still revealing paths for web directories"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Eric.Stevensaventis.com wrote:
>
> it would seem not to work on IIS4, SP6. I get http 500 - Internal Server
> Error.

Right.

I have just applied SP6a to the IIS 4 server (where I have reproduced
this first). The problem still exists. Only SP3/SP5/SP6a (in that
order) have been applied - no hotfixes at all.

Probably some of the hotfixes have solved this problem, but that has not
been included in SP6a. I give up, since I don't know how to disable this
'feature', and don't have time to play with it either. I'd be happy if
someone from Microsoft would give us a clue (the problem still exists on
their site, so...)

Thanks.

--
Vanja Hrustic
SAFER Editor
SAFER - free monthly security newsletter
Subscriptions at http://safer.siamrelay.com

• Next message: Anthony Benjamin: "Re: MS IIS 5.0 Access Violation on handling URL String"
• Previous message: Max Vision: "Re: Anyone can take over virtually any domain on the net..."
• In reply to: Eric.StevensAVENTIS.COM: "Re: IIS still revealing paths for web directories"
• Next in thread: Chris Tobkin: "Re: IIS still revealing paths for web directories"
• Reply: Vanja Hrustic: "Re: IIS still revealing paths for web directories"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Mon Jan 17 2000 - 16:10:48 CST