IIS 4.0 allows a remote malicious user to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft internet information server 4.0 |
||
microsoft internet information services 5.0 |
||
microsoft internet information server 3.0 |
Vulmon