RE: IIS5.0 Directory Browsing

From: Craig Humphrey (craig.humphrey@chapmantripp.com)
Date: 11/29/01 

Message-ID: <3D6694DB1788D311BA3E00508B5DFFE7036F8889@aklmessage01>
From: Craig Humphrey <craig.humphrey@chapmantripp.com>
To: focus-ms@securityfocus.com
Subject: RE: IIS5.0 Directory Browsing
Date: Fri, 30 Nov 2001 08:57:21 +1300

If you must use such a bad product, how about setting up a virtual server,
that has directory browsing enabled, but only make that virtual server
available to the IP address that the search engine is running on....

Later'ish
Craig

> -----Original Message-----
> From: Enrico Tausz [mailto:etausz@ig.com.br]
> Sent: Thursday, 29 November 2001 19:06
> To: focus-ms@securityfocus.com
> Subject: IIS5.0 Directory Browsing
>
>
>
>
> Hello everyone,
>
> I´m evaluating a search tool named 'webinator' and to
> make the searh work, I have to permit 'directory
> brosing' in my IIS. To prevent expose my diretories, I
> put a default document in every subdirectory.
>
> Can somebody tell me if my server is VUL using this
> solution ?
>
> Thanks in Advance.
>
> Enrico
> etausz@ig.com.br
>

Relevant Pages

  • Re: WebDav and Excel doesnt work
    ... People successfully do this with ASP and ASPX all the time. ... > ASP.Net ISAPI to the appropriate content (so IIS will invoke ASP.Net prior ... This page, opens the file ... > If in IIS i disable the Directory Browsing the File Cannot be viewed but the ...
    (microsoft.public.inetserver.iis)
  • Re: IIS & WMS
    ... Even if I could get it to work, the directory browsing part is another ... I want to use IIS to display a list of all files in a folder ... your WMS publishing point locations with .wvx metafiles in the IIS directory. ...
    (microsoft.public.windowsmedia.server)
  • Re: WebDav and Excel doesnt work
    ... WebDAV and Authentication built into IIS should easily solve this problem ... Ricardo Almeida "David Wang " wrote:> If you are trying to make the ASPX page secure access to the .DOC and .XLS> files, then simply put the .DOC and .XLS files OUTSIDE of the website so> that they are completely inaccessible via a URL, and then write the ASPX> page to open and stream those file content > to the browser. ... > The fact that directory browsing affects behavior suggests that you have at> least some coding errors in your ASPX page that relies on URL-based access> to obtain the content> ... opens the file> and return it to the client... ...
    (microsoft.public.inetserver.iis)
  • Re: IIS & WMS
    ... Even if I could get it to work, the directory browsing part is another ... I want to use IIS to display a list of all files in a folder ... your WMS publishing point locations with .wvx metafiles in the IIS ... The .wvx will then cause the videos to be streamed from WMS rather than ...
    (microsoft.public.windowsmedia.server)
  • Cannot save to Web Folder
    ... I am a developer and i'm trying to save an excel file to my Web Folder( ... When i enable in IIS the Directory Browsing it's ... but when i disable directory browsing the file cannot be saved ... have Windows team Services that came on Office 2003 ...
    (microsoft.public.sharepoint.windowsservices)