NT Versions Affected:

4.0


Problem:

A URL such as http://www.domain.com/scripts/script_name%0A%0D>PATH\target.bat will create an output file 'target.bat''.


Verification:

http://www.omna.com/iis-bug.htm