RE: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode Error V ulnerability]

From: Adriano Dias (adiasat_private)
Date: Wed May 16 2001 - 08:17:19 PDT

Next message: Axel Hammer: "logitech wireless devices: man-in-the-middle attack"

Previous message: Stephen Shirley: "Re: RH7.0: man local gid 15 (man) exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Ya! I did that!
I used the .asp file to upload and execute the nc file and to get the system
permissions.

If you need some instructions to do that, send it to the list.

Adriano Dias
Proteus Security Systems

-----Original Message-----
From: e-Security Chap [mailto:e-securitychapat_private]
Sent: Tuesday, May 15, 2001 10:42 PM
To: Andrew Thomas; BUGTRAQat_private
Subject: [RE: NSFOCUS SA2001-02 : Microsoft IIS CGI Filename Decode
Error V ulnerability]


 hi folks,
 its just another expected iis bug. did anybody tried out the chance of
elevating privileges. i have tried the same techniques as in the iis unicode
bug, however i could not.
 any known ways to do that?
 regards

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1

Next message: Axel Hammer: "logitech wireless devices: man-in-the-middle attack"
Previous message: Stephen Shirley: "Re: RH7.0: man local gid 15 (man) exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed May 16 2001 - 17:07:05 PDT