OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq Archives: Re: IIS still revealing paths for web directo

Re: IIS still revealing paths for web directories

Subject: Re: IIS still revealing paths for web directories
From: Antonio Ropero (antoniorHISPASEC.COM)
Date: Sat Jan 15 2000 - 07:35:30 CST

Hi,
To solve this problem check in the propierties of the web server
the option "Check that file exists", in
Home Directory/Application Settings/Configuration/App Mappings in
the Edit Window of the .ida and .idq extensions.
Both extensions are interpreted by idq.dll.

Antonio Ropero
antoniorhispasec.com
HispaSec
http://www.hispasec.com

----- Original Message -----
From: Chris Tobkin <tobkinSOFTWARE.UMN.EDU>
To: <BUGTRAQSECURITYFOCUS.COM>
Sent: miércoles 12 de enero de 2000 21:07
Subject: Re: [BUGTRAQ] IIS still revealing paths for web
directories

> > The same problem still exists on IIS4 (tested with SP5 -
didn't try on
> > SP6).
>
> Still exists as far back as IIS3 also. (SP6a)
>
> Error "The IDQ file x:\web_home_dir\anything.idq could not be
found. "
> (0xc000203e) encountered while processing the query
"<%CIRESTRICTION%>".
>
> // chris
> tobkinumn.edu
>
>
*****************************************************************
********
> Chris Tobkin
tobkinumn.edu
> Java and Web Services - Academic and Distributed Computing
Services - UMN
> Shep. Labs 190
Minneapolis, MN 55455
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> "Nothing great was ever achieved without enthusiasm."
> - Ralph Waldo Emerson, poet, writer, and philosopher
>
*****************************************************************
********
>

This archive was generated by hypermail 2b27 : Mon Jan 17 2000 - 17:00:41 CST