[Previous] [Next] [Index] [Thread]

Re: Microsoft IIS vv. 1.x, 2.0b New Security Bugs Alert.



   Sorry, the exit at the end of the BAT can not be considered as a good protection since bugs #2 and #3: anyone can create new BAT file in your /cgi-bin directory without "exit" at the end.

At 06:06 PM 7/1/96 GMT, you wrote:
>>...
>>        http://www.omna.com/msiis/
>>...
>
>You seem to have forgotten to publish one of the work-arounds:
>
>  Put EXIT at the end of your batch files!
>
>And check out http://www.softshore.com.au/cgi-bin/PEARL.BAT?
>
>- G.
>

   Sincerely,
   Andy


Follow-Ups: