Re: IIS Unicode Question

You can still gain access to the system drive by requesting files from a
virtual directory that is mapped there:

/msadc
/iisadmpwd
/iisadmin
/scripts
/cgi-bin
/iisamples

etc...

Critical Watch Bugtraqqer wrote:
>
> Leon--
> Started looking at some of the .gov sites that he has recently broken into.
> Did a request for nonexistantfile.idq ... many of them have their websites
> on separate drives from the system drive. Did they move the websites after
> the fact/hack? Hard to tell. Gut check? Probably not. Therefore, the
> Unicode hole would not be effective and his claim still stands that he has a
> gnu hole.
Received on Nov 01 2000