Microsoft IIS (Windows NT 4.0/SP1/SP2/SP3/SP4/SP5) – ‘.IDC’ Path Mapping

漏洞ID	1053398	漏洞类型
发布时间	1999-06-04	更新时间	1999-06-04
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/19239

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/299/info

The full physical path name for the IIS web server root directory may be obtained by attempting to view a non-existent .IDC file. The web server will return an error message that lists the absolute pathname of the "missing" .IDC file. 

"http://www.someURL.com/hackme.idc"

will return:

Error Performing Query
Error processing file 'c:inetpubscriptssampleshackme.idc'

相关推荐: KDE klock kscreensaver缓冲区溢出漏洞

KDE klock kscreensaver缓冲区溢出漏洞漏洞ID 1207359 漏洞类型缓冲区溢出发布时间 1998-05-16 更新时间 1998-05-16 CVE编号 CVE-1999-1096 CNNVD-ID CNNVD-199805-01…