Bugtraq: Re: IIS still revealing paths for web directories

[antonior () HISPASEC COM (Antonio Ropero)]

Hi,
To solve this problem check in the propierties of the web server
the option "Check that file exists", in
Home Directory/Application Settings/Configuration/App Mappings in
the Edit Window of the .ida and .idq extensions.
Both extensions are interpreted by idq.dll.

Antonio Ropero
antonior () hispasec com
HispaSec
http://www.hispasec.com

----- Original Message -----
From: Chris Tobkin <tobkin () SOFTWARE UMN EDU>
To: <BUGTRAQ () SECURITYFOCUS COM>
Sent: miércoles 12 de enero de 2000 21:07
Subject: Re: [BUGTRAQ] IIS still revealing paths for web
directories

> > The same problem still exists on IIS4 (tested with SP5 -
didn't try on
> > SP6).
> Still exists as far back as IIS3 also. (SP6a)
>
> Error "The IDQ file x:\web_home_dir\anything.idq could not be
found. "
> (0xc000203e) encountered while processing the query
"<%CIRESTRICTION%>".
> // chris
> tobkin () umn edu
*****************************************************************
********
> Chris Tobkin
tobkin () umn edu
> Java and Web Services - Academic and Distributed Computing
Services - UMN
> Shep. Labs 190
Minneapolis, MN 55455
>              ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>         "Nothing great was ever achieved without enthusiasm."
>         - Ralph Waldo Emerson, poet, writer, and philosopher
*****************************************************************
********
>