There are post-SP5 fixes other than SP6 that can have this affect. (What is
an MS SP but a collection of fixes released since the last SP?)
I know the Ogle utility has this affect, as well as the (iirc) malformed
HTTP request header fix.
My impression that the use of slash-delimited query strings with IIS4 was
taking advantage of a vulnerability 'feature' .
HTH
Sean G.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 25, 2000 7:18 AM
To: [EMAIL PROTECTED]
Subject: Parsing URLs on IIS 4
Can anyone suggest what settings in IIS 4 / SP5 could cause problems with
slash-delimited query strings?
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
