Disable Parent Paths

From: Robert Zachary (RZacha1at_private)
Date: Mon Jan 31 2000 - 07:37:47 PST

Next message: jalertaat_private: "SyGate 3.11 Port 7323 / Remote Admin hole"

Previous message: Nir Simionovich (Rin Solo): "Re: Cobalt RaQ2 - and QUBE2"
Next in thread: Justin King: "Re: Disable Parent Paths"
Reply: Justin King: "Re: Disable Parent Paths"
Reply: Gary Geisbert: "Re: Disable Parent Paths"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Writing a new IIS policy :

summary: Parent Paths allows you to use '..' in calls to MapPath and the
like. By default this option is enabled and should be disabled. To disable
this option go to the root of the Web site in question, right click select
Properties | Home Directory | Configuration | App Options and uncheck Enable
Parent Paths.

my question: What security hole/hack does this create if left enabled?.


Rob

Next message: jalertaat_private: "SyGate 3.11 Port 7323 / Remote Admin hole"
Previous message: Nir Simionovich (Rin Solo): "Re: Cobalt RaQ2 - and QUBE2"
Next in thread: Justin King: "Re: Disable Parent Paths"
Reply: Justin King: "Re: Disable Parent Paths"
Reply: Gary Geisbert: "Re: Disable Parent Paths"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:32:15 PDT