4 ms·
Related to this bug: used to be a vulnerability in IIS back in the late 90s where you could append ::$DATA to a file name (e.g Foo.asp::$DATA) and download a se
by duncans 10y ago
Related to this bug: used to be a vulnerability in IIS back in the late 90s where you could append ::$DATA to a file name (e.g Foo.asp::$DATA) and download a server-side script's source code.
- jameshart 10y agoRelated - meaning the ::$DATA was interpreted as a request for an alternate data stream from the file, and then read the default stream?
- duncans 10y agoMore info https://technet.microsoft.com/en-us/library/security/ms98-003.aspx https://technet.microsoft.com/en-us/library/security/ms98-00... - seems to imply that $DATA is the default stream.