Re: Perl.exe and IIS security advisory

twellsSHORE.NET

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Marc: "IIS Advisory Update"
• Previous message: KuRuPTioN: "SSH Daemon"
• In reply to: mnemonix: "Perl.exe and IIS security advisory"
• Next in thread: bandreggREDHAT.COM: "Using Example Domain Names in Exploits"

On Fri, Jan 22, 1999 at 08:58:33PM -0000,
mnemonix <mnemonixGLOBALNET.CO.UK> is thought to have said:

> In all versions of IIS, where a  website has been configured to interpret
> perl scripts using the perl executable (perl.exe), a problem exists where a
> request for a non-existent file will return the physical location on a disk
> of a web directory. A request for:
>
> http://www.server.com/scripts/no-such-file.pl

I really wish people wouldn't do this. www.server.com is a legitimate
site (it's hosted on my network) and they certainly don't run IIS.

Tabor
Shore.Net
--
___________________________________________________________________________
Tabor J. Wells                                             twellsshore.net
Systems Administration Manager  Just another victim of the ambient morality
Shore.Net  --  High quality Internet access and hosting services since 1993

• Next message: Marc: "IIS Advisory Update"
• Previous message: KuRuPTioN: "SSH Daemon"
• In reply to: mnemonix: "Perl.exe and IIS security advisory"
• Next in thread: bandreggREDHAT.COM: "Using Example Domain Names in Exploits"