Microsoft's Newest Gaping Security Hole

By SKillBot April 3, 2000 3:07 AM

     Print Story

(GN) On most sites that use Microsoft's ASP technology, you can view the source of any of the .asp files.?Bascially, any IIS server that can find null.htw will allow you to view the source.?A patch was released on friday.?But from what I've seen, it hasn't been widely used yet.?I was seriously thinking about sleeping tonight, too.?Click below for an example and a fun php script to make it easy.

Tweet This Now!

Warning: include(/www/dtheatre.com/articles/846.inc) [function.include]: failed to open stream: No such file or directory in /home2/pilser/public_html/sections/default/main.php on line 63

Warning: include(/www/dtheatre.com/articles/846.inc) [function.include]: failed to open stream: No such file or directory in /home2/pilser/public_html/sections/default/main.php on line 63

Warning: include() [function.include]: Failed opening '/www/dtheatre.com/articles/846.inc' for inclusion (include_path='.:/opt/php52/lib/php') in /home2/pilser/public_html/sections/default/main.php on line 63

Reader Discussions:

Post YOUR opinion too!

arg!!!   reply

Posted by sKillBot (travis@pulley.org) on April 3, 2000 2:56 AM

I hate php's ereg function. That script is supposed to seperate the server from the script and preserve the path. But the gimpy matching includes the path as part of the server. So it only works if there's not one, like http://server/file Anyone know how to fix that?