Re: IIS still revealing paths for web directories

From: Vladimir Dubrovin (vladat_private)
Date: Wed Jan 12 2000 - 10:48:13 PST

  • Next message: Chris Tobkin: "Re: IIS still revealing paths for web directories"

    Hello Vanja Hrustic,
    
    10.01.2000 22:42, you wrote: IIS still revealing paths for web directories;
    
    
    V> Request : http://www.microsoft.com/anything.ida
    V> Response: The IDQ file d:\http\anything.ida could not be found.
    
    V> The same problem still exists on IIS4 (tested with SP5 - didn't try on
    V> SP6).
    
    V> It's not really a big deal, but they should fix it.
    
    IIS4+SP6 is not vulnerable - reply is ERROR 404.
    
    
      +=-=-=-=-=-=-=-=-=+
      |Vladimir Dubrovin|
      | Sandy Info, ISP |
      +=-=-=-=-=-=-=-=-=+
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:28:15 PDT