Microsoft IIS 5.1 Alternate Data Stream Authentication Bypass Vulnerability

Microsoft IIS 5.1 Alternate Data Stream Authentication Bypass Vulnerability

References:

IIS 5.1 Directory Authentication Bypass (Soroush Dalili)
IIS5.1 Directory Authentication Bypass by using ':$I30:$Index_Allocation' (Soroush Dalili)
Microsoft IIS Homepage (Microsoft)
Microsoft Security Bulletin MS10-065 - Important (Microsoft)

Privacy Statement
Copyright 2010, SecurityFocus