Bugtraq mailing list archives
IIS still revealing paths for web directories
From: mikehow () MICROSOFT COM (Michael Howard)
Date: Mon, 17 Jan 2000 17:28:43 -0800
here's the low-down. 1) if you don't use ida or idq files then nuke the mappings in iis. 2) if you do use them, then make sure the "Check file exists" option is checked 3) we are working on a fix and doing 'due-diligence' to make sure there's nothing similar or regressions 4) we'll post the fix once (3) is complete thanks! Cheers, Michael Howard Windows 2000 Security Got an 'Access Denied' problem? Check the appropriate logs first! <HR NOSHADE> <UL> <LI>application/x-pkcs7-signature attachment: smime.p7s </UL>
Current thread:
- Re: IIS still revealing paths for web directories Jonah Kowall (Jan 12)
- <Possible follow-ups>
- SV: IIS still revealing paths for web directories Kristoffer Ustad (Jan 13)
- Re: IIS still revealing paths for web directories Eric.Stevens () AVENTIS COM (Jan 13)
- Re: IIS still revealing paths for web directories Vanja Hrustic (Jan 15)
- Re: IIS still revealing paths for web directories Rob Systhine (Jan 14)
- Re: IIS still revealing paths for web directories Frank Knobbe at Home (Jan 15)
- Re: IIS still revealing paths for web directories Niklas Schiffler (Jan 18)
- IIS still revealing paths for web directories Michael Howard (Jan 17)
- Re: IIS still revealing paths for web directories Brock Tellier (Jan 18)
- Re: IIS still revealing paths for web directories Kevin Matthew (Jan 19)
- Re: IIS still revealing paths for web directories Michael Howard (Jan 20)