Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
BID:14764
Info
Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
| Bugtraq ID: | 14764 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 04 2005 12:00AM |
| Updated: | Sep 04 2005 12:00AM |
| Credit: | Discovery is credited to Inge Henriksen. |
| Vulnerable: |
Microsoft IIS 5.1 |
| Not Vulnerable: | |
Discussion
Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability.
A successful attack causes the Web server to present the requested file as a plain text file and subsequently disclosing the source.
It should be noted that this issue only presents itself when the requested files are stored on a FAT or FAT32 volume and does not arise if the script files are stored on a NTFS volume.
Microsoft IIS 5.1 is vulnerable to this issue.
Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability.
A successful attack causes the Web server to present the requested file as a plain text file and subsequently disclosing the source.
It should be noted that this issue only presents itself when the requested files are stored on a FAT or FAT32 volume and does not arise if the script files are stored on a NTFS volume.
Microsoft IIS 5.1 is vulnerable to this issue.
Exploit / POC
Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
An exploit is not required.
The following proof of concept example is available:
GET /www/test.as%CF%80 HTTP/1.1
Translate: f
Host: www.example.com
Connection: Close
An exploit is not required.
The following proof of concept example is available:
GET /www/test.as%CF%80 HTTP/1.1
Translate: f
Host: www.example.com
Connection: Close
Solution / Fix
Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft IIS WebDAV HTTP Request Source Code Disclosure Vulnerability
References:
References:
- IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using Web (Inge Henriksen)
- Technet Security (Microsoft)