OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Only UNICODE "/" and "\" cause problem?
From: Ryan Yagatich (ryagatichCSN1.COM)
Date: Thu Dec 28 2000 - 11:07:47 CST


I've attempted this on a couple machines with no luck.

Machine 1: NT4.0/SP6a/IIS4.0 - English
Machine 2: Win2k/SP1/IIS5.0 - English

Ryan

<< Yuu Arai Wrote:

"Hi,

According to Security Focus website
(http://www.securityfocus.com/bid/1806), this vulnerability could
reproduce only if using UNICODE substitution for "/" and "\". But I
could not believe that only "/" and "\" UNICODE characters cause this
issue. And tried on Windows NT Server 4.0 Japanese version + SP6a +
IIS 4.0 to ensure my opinion is true or not."
>>