Signature Detail
Short Name |
HTTP:STC:SRVRSP:IDC-PATH |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
IIS IDC Path Disclosure |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: IIS IDC Path Disclosure
This signature detects attempts to reveal the path of the Windows NT 4.0 IIS Web server root directory using a non-existent .idc file.
Extended Description
The full physical path name for the IIS web server root directory may be obtained by attempting to view a non-existent .IDC file. The web server will return an error message that lists the absolute pathname of the "missing" .IDC file.
Affected Products
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT Terminal Server 4.0
References
- BugTraq: 299
- CVE: CVE-1999-0874
- URL: http://support.microsoft.com/support/kb/articles/Q193/6/89.asp