Re: IIS still revealing paths for web directories

From: Jonah Kowall (jkowallat_private)
Date: Wed Jan 12 2000 - 09:34:50 PST

  • Next message: Haight, Kristofer: "Re: Anyone can take over virtually any domain on the net..."

    I cannot replicate this on my IIS 4 or 5 Servers.
    
    -----Original Message-----
    From: Vanja Hrustic [mailto:vanjaat_private]
    Sent: Monday, January 10, 2000 2:43 PM
    To: BUGTRAQat_private
    Subject: IIS still revealing paths for web directories
    
    
    This has been mentioned before, but it's probably good to remind
    Microsoft about some outstanding issues.
    
    Request : http://www.microsoft.com/anything.ida
    Response: The IDQ file d:\http\anything.ida could not be found.
    
    Request : http://www.microsoft.com/anything.idq
    Response: The IDQ file d:\http\anything.idq could not be found.
    
    Microsoft is running IIS5
    
    The same problem still exists on IIS4 (tested with SP5 - didn't try on
    SP6).
    
    It's not really a big deal, but they should fix it.
    
    --
    
    Vanja Hrustic
    The Relay Group
    http://relaygroup.com
    Technology Ahead of Time
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:28:17 PDT