Microsoft IIS (Windows NT 4.0SP1SP2SP3SP4SP5) - .IDC Path Mapping

1999-06-04T00:00:00
ID EXPLOITPACK:E6747EBE25E2A09BD84E607DE97B78E6
Type exploitpack
Reporter Scott Danahy
Modified 1999-06-04T00:00:00

Description

Microsoft IIS (Windows NT 4.0SP1SP2SP3SP4SP5) - .IDC Path Mapping

                                        
                                            source: https://www.securityfocus.com/bid/299/info

The full physical path name for the IIS web server root directory may be obtained by attempting to view a non-existent .IDC file. The web server will return an error message that lists the absolute pathname of the "missing" .IDC file. 

"http://www.someURL.com/hackme.idc"

will return:

Error Performing Query
Error processing file 'c:\inetpub\scripts\samples\hackme.idc'