Vulnerability Development mailing list archives
RE: about idq.dll problem!!!
From: "Rense Buijen" <Rense.Buijen () dct-mail com>
Date: Mon, 25 Mar 2002 09:23:29 +0100
" The error that you see is returned because there is nothing after the '=' sign." http://server.com/null.ida?=ThereISsomthingHere Well, there is definitely something after the "=" sign there, and it still gives the same error; "File . Error 0x80040e14 caught while processing query" So either they have not done their research or they are trying to cover up something more serious. Has anyone tried attaching a debugger to IIS (inetinfo.exe I believe)? With kinds regards, Rense -----Original Message----- From: RWXLabs [mailto:rwxlabs () rwxsecurity com] Sent: maandag 25 maart 2002 4:23 To: vuln-dev Subject: about idq.dll problem!!! Hi, After several emails changed with the Microsoft on the problem presented for idq.dll, follows below the last envoy for the Microsoft Security Response Center. ------------------------------------------------------------------------ -------- Hi, thanks for the additional information. This is very helpful. I've conferred with our teams and we can explain what you're seeing. The error that you see is returned because there is nothing after the = sign. To be clear, there is no corruption of any sort. Both IIS and Indexing Service recover correctly. We realize that it's a bit confusing and we are looking into using a standard 404 error for this type of issue in the future. Thank you very much for bringing this to us, we really appreciate it. Regards, secure () microsoft com ------------------------------------------------------------------------ -------- Thanks, Marcos Ferreira marcos () rwxsecurity com RWXSecurity - Information Security http://www.rwxsecurity.com
Current thread:
- about idq.dll problem!!! RWXLabs (Mar 24)
- <Possible follow-ups>
- RE: about idq.dll problem!!! Rense Buijen (Mar 25)