Re: IIS still revealing paths for web directories

From: Niklas Schiffler (nickat_private)
Date: Tue Jan 18 2000 - 05:45:07 PST

Next message: John Comeau: "Re: problem with SNMPc"

Previous message: Microsoft Product Security: "Microsoft Security Bulletin (MS00-005)"
Maybe in reply to: Michael Howard: "IIS still revealing paths for web directories"
Next in thread: Brock Tellier: "Re: IIS still revealing paths for web directories"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Please filter this if outdated.

I coulnd't find anything about CERN httpd 3.0 revealing paths in
the archives.

http://www.victim.com/cgi-bin/ls
results in:
Bad script request -- neither '/usr/local/etc/ls' nor '/usr/local/etc/ls.pp' is executable

http://www.victim.com/cgi-bin/cat
results in:
Bad script request -- neither '/usr/local/etc/cat' nor '/usr/local/etc/cat.pp' is executable

Greetings,

Nick

Next message: John Comeau: "Re: problem with SNMPc"
Previous message: Microsoft Product Security: "Microsoft Security Bulletin (MS00-005)"
Maybe in reply to: Michael Howard: "IIS still revealing paths for web directories"
Next in thread: Brock Tellier: "Re: IIS still revealing paths for web directories"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:28:46 PDT