does anyone have a packetdump of the iis_htr_overflow.nasl after an IIS 4.0
system has been patched?
On unpatched IIS 4.0 I get
1) send malformed POST
2) recv "HTTP 1.1 100 Continue" from server
3) server sends FIN and closes connection (nessus reports success)
On patched IIS 4.0, I get the exact same as above.
On IIS 5.0 everything works fine.
John Lampe
https://f00dikator.hn.org/
"Knowledge will forever govern ignorance, and a people who mean to be their
own governors, must arm themselves with the power knowledge gives. A popular
government without popular information or the means of acquiring it, is but
a prologue to a farce or a tragedy or perhaps both."
--James Madison
system has been patched?
On unpatched IIS 4.0 I get
1) send malformed POST
2) recv "HTTP 1.1 100 Continue" from server
3) server sends FIN and closes connection (nessus reports success)
On patched IIS 4.0, I get the exact same as above.
On IIS 5.0 everything works fine.
John Lampe
https://f00dikator.hn.org/
"Knowledge will forever govern ignorance, and a people who mean to be their
own governors, must arm themselves with the power knowledge gives. A popular
government without popular information or the means of acquiring it, is but
a prologue to a farce or a tragedy or perhaps both."
--James Madison