MS Index Services and Indexing Services Path Disclosure Vulnerability

Requesting a non-existent resource along with a known directory to a system running Index Server 2.0 and Indexing Services, will disclose an error message containing the physical path to the requested web directory.


 

Privacy Statement
Copyright 2010, SecurityFocus