info
discussion
exploit
solution
references
NT IIS4 Log Avoidance Vulnerability
An http get request against an IIS4 server will not be logged if the request is longer than 10150 bytes long.
Privacy Statement
Copyright 2010, SecurityFocus