Re: IIS still revealing paths for web directories

From: Antonio Ropero (antoniorat_private)
Date: Sat Jan 15 2000 - 05:35:30 PST

Next message: Patrick Oonk: "Security hole in mail2web web-based emailservice"

Previous message: Lark Lizerman: "Re: MS IIS 5.0 Access Violation on handling URL String"
Maybe in reply to: Vanja Hrustic: "IIS still revealing paths for web directories"
Next in thread: Norbert Luckhardt: "Re: IIS still revealing paths for web directories"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,
To solve this problem check in the propierties of the web server
the option "Check that file exists", in
Home Directory/Application Settings/Configuration/App Mappings in
the Edit Window of the .ida and .idq extensions.
Both extensions are interpreted by idq.dll.

Antonio Ropero
antoniorat_private
HispaSec
http://www.hispasec.com




----- Original Message -----
From: Chris Tobkin <tobkinat_private>
To: <BUGTRAQat_private>
Sent: miércoles 12 de enero de 2000 21:07
Subject: Re: [BUGTRAQ] IIS still revealing paths for web
directories


> > The same problem still exists on IIS4 (tested with SP5 -
didn't try on
> > SP6).
>
> Still exists as far back as IIS3 also. (SP6a)
>
> Error "The IDQ file x:\web_home_dir\anything.idq could not be
found. "
> (0xc000203e) encountered while processing the query
"<%CIRESTRICTION%>".
>
> // chris
> tobkinat_private
>
>
*****************************************************************
********
> Chris Tobkin
tobkinat_private
> Java and Web Services - Academic and Distributed Computing
Services - UMN
> Shep. Labs 190
Minneapolis, MN 55455
>              ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>         "Nothing great was ever achieved without enthusiasm."
>         - Ralph Waldo Emerson, poet, writer, and philosopher
>
*****************************************************************
********
>

Next message: Patrick Oonk: "Security hole in mail2web web-based emailservice"
Previous message: Lark Lizerman: "Re: MS IIS 5.0 Access Violation on handling URL String"
Maybe in reply to: Vanja Hrustic: "IIS still revealing paths for web directories"
Next in thread: Norbert Luckhardt: "Re: IIS still revealing paths for web directories"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:28:30 PDT