Re: Personal web server

From: Michael Howard (mikehowat_private)
Date: Tue Jan 19 1999 - 13:51:48 PST

Next message: Steve VanDevender: "Re: Sendmail 8.8.x/8.9.x bugware"

Previous message: Jared Mauch: "Re: Remote Cisco Identification"
Next in thread: Sean Coates: "Re: Personal web server"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

the frontpage team are looking at it now - as sean noted, the iis codebase
in pws does not have this issue. i'll fwd more info to this alias as soon as
i get more info from the fp team.

Cheers, MH
IIS Security


-----Original Message-----
From: Sean Coates [mailto:seanat_private]
Sent: Monday, January 18, 1999 10:13 AM
To: BUGTRAQat_private
Subject: Re: Personal web server


kiborg wrote:

> Hello,
>
> Sorry if this has already been known. But i didn't find something of the
> sort.
> While playing with Microsoft Personal Web Server
> (Frontpage-PWS32/3.0.2.926).
> I found that the following URL will list the root directory and be able to
> download any file you want.
> http://www.victim.com/....../
>

That seems to be fixed in the windows98 version of PWS

(http://24.231.6.49/....../ returns server error 161)

Sean Coates
scoatesat_private
seanat_private

Next message: Steve VanDevender: "Re: Sendmail 8.8.x/8.9.x bugware"
Previous message: Jared Mauch: "Re: Remote Cisco Identification"
Next in thread: Sean Coates: "Re: Personal web server"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:29:19 PDT