UNICODE2 (2708)

From: Security COnfera (honza.dforumat_private)
Date: Wed May 16 2001 - 12:55:49 PDT

Next message: bugzillaat_private: "[RHSA-2001:063-02] Updated gnupg packages available"

Previous message: PJ: "Re: RH7.0: man local gid 15 (man) exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all


I tested Microsoft IIS CGI Filename Decode Error Vulnerability
on Personal Web Server v1.0 and v3.0 on win98 and is vulnerable.

i use /scripts/..%255c..%255c

and
 %%35c , %%35%63 , %25%35%63 

Kachlik Jan


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOwJLZCBUZIferCyJEQKALwCgoPa9XX7UjbcSiWDmbjQTTvaAz2sAoJhR
ejDh3ZByrXLmd6b4j++76s6O
=7++w
-----END PGP SIGNATURE-----

Next message: bugzillaat_private: "[RHSA-2001:063-02] Updated gnupg packages available"
Previous message: PJ: "Re: RH7.0: man local gid 15 (man) exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 17 2001 - 00:31:48 PDT