Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)

Subject: Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)
From: Mnemonix (mnemonixGLOBALNET.CO.UK)
Date: Fri Jan 28 2000 - 09:51:32 CST

• Next message: |Zan: "ZBServer 1.50-r1x exploit (WinNT)"
• Previous message: Patrick Oonk: "[FreeBSD Security Advisory: FreeBSD-SA-00:02.procfs]"
• Next in thread: Fredrik Widlund: "Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)"
• Maybe reply: Mnemonix: "Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

> I apply the patch from Microsoft and it doesnt change the problem. I test
> this after and the problem are the same
>
> *** WARNING ****
> Even if you have no .htw files on your system you're probably
> still vulnerable! A quick test to show if you are vulnerable:
> go to http://YOUR_WEB_SERVER_ADDRESS_HERE/nosuchfile.htw
> If you receive a message stating the "format of the QUERY_STRING
> is invalid" you _are_ vulnerable.

This test is to see if you're vulnerable _before_ you apply the patch. After
you install the patch you _will_still get the same message.

Cheers,
David Litchfield
http://www.cerberus-infosec.co.uk/

• Next message: |Zan: "ZBServer 1.50-r1x exploit (WinNT)"
• Previous message: Patrick Oonk: "[FreeBSD Security Advisory: FreeBSD-SA-00:02.procfs]"
• Next in thread: Fredrik Widlund: "Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)"
• Maybe reply: Mnemonix: "Re: Alert: MS IIS 4 / IS 2 (Cerberus Security Advisory CISADV000126)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Fri Jan 28 2000 - 15:09:29 CST