Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| Microsoft IIS Fails to Log HTTP TRACK Requests |
|---|
Categorie: Vulnerability
Posted: 2003-12-29 by ReCall
Views: 555
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: A logging vulnerability was reported in Microsoft Internet Information Server. A type of remote request is not logged.
AQTRONIX reported that the server does not log HTTP 'TRACK' requests. As a demonstration exploit, you can reportedly connect to the target server and send the following text followed by two carriage return/line feed sequences:
TRACK / HTTP/1.0
The report indicates that IIS version 6 is not vulnerable.
Impact: A remote user can make an HTTP TRACK request to obtain information about the server without the request being logged.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=626
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
