Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Prohibiting Index Server does not prevent information leakage in IIS 6.0 Dec 01 2005 02:30PM
Ömer Faruk Özer (faruk ozer uekae tubitak gov tr)

I was expecting that prohibiting Index Service under Web Server Extensions
really prevents information leakage due to querying Indexing Service through
IIS 6.0. However, actually it does not.

Following is the step by step scenario:

1. Clean install Windows Server 2003
2. Install IIS 6.0
3. Instal...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus