OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrew Thomas (andrewunysen.com)
Date: Tue May 15 2001 - 06:58:55 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > NSFBUGTRAQOCUS Security Advisory(SA2001-02)
    >
    > Topic: Microsoft IIS CGI Filename Decode Error Vulnerability
    >
    > Affected system:
    > ================
    >
    > - Microsoft IIS 4.0
    > - Microsoft IIS 5.0
    >
    > Not affected system:
    > ====================
    >
    > - Microsoft IIS 4.0
    > + Microsoft Windows NT 4 + SP6/SP6a(without any new hotfix)

    FWIW, you can add Microsoft-PWS to the list of affected systems -
    just confirmed on NT4 W/S SP6.

    Take care,
      Andrew
    -
    Andrew Thomas
    office: +27 21 4889820
    facsimile: +27 21 4889830
    mobile: +27 82 7850166
     "One trend that bothers me is the glorification of
    stupidity, that the media is reassuring people it's
    alright not to know anything. That to me is far more
    dangerous than a little pornography on the Internet."
      - Carl Sagan