IIS6文件名解析漏洞
今天看到了有人公开的IIS6解析漏洞,IIS会把 “webshell.asp;.jpg” 这样的文件名当成 webshell.asp 解释运行(正常应该是当图片输出)。
经本地测试,确实存在该漏洞。不过,要找到可利用站点似乎不太容易。
目标网站必须符合以下几点:
1,网站服务器使用IIS
2,使用ASP(或PHP)做的程序,而且不是流行程序(流行程序基本已过滤)
3,能上传文件,或者会员能上传文件(单用户BLOG就不行啦)
4,上传文件不会被重命名。
I go to see daily a few websites and websites to read
articles or reviews, however this webpage offers feature
based writing.
Howdy! I could have sworn I’ve visited this site before but after looking at
many of the posts I realized it’s new to me.
Nonetheless, I’m certainly pleased I came across it and I’ll be
bookmarking it and checking back regularly!
Hello, yup this paragraph is truly fastidious and I have learned
lot of things from it on the topic of blogging. thanks.
adreamoftrains web host
Hi, Neat post. There’s a problem along with your web site in internet explorer, might test this?
IE nonetheless is the marketplace chief and a big element of folks will miss your magnificent writing because of this problem.
Thanks for finally talking about >IIS6文件名解析漏洞 <Liked it!
Wow, amazing weblog layout! How long have you been blogging for?
you make blogging glance easy. The overall glance of your web site is great, let alone the
content!
You should be a part of a contest for one of the greatest blogs on the web.
I’m going to highly recommend this website!
I’m extremely impressed with your writing skills as well
as with the layout on your weblog. Is this a paid theme
or did you customize it yourself? Anyway keep up the excellent
quality writing, it’s rare to see a great blog like this one
nowadays.
Asking questions are in fact good thing if you are
not understanding anything completely, except this paragraph offers nice understanding even.
Wonderful article! We will be linking to this great post on our
website. Keep up the good writing.
It’s not my first time to visit this web
page, i am visiting this web site dailly and take good facts from
here all the time. 32hvAj4 cheap flights
Does your blog have a contact page? I’m having a
tough time locating it but, I’d like to shoot you an email.
I’ve got some recommendations for your blog you might be interested in hearing.
Either way, great blog and I look forward to seeing it improve over time.
This piece of writing gives clear idea designed for the new users of blogging, that in fact how to do blogging.
I do not know if it’s just me or if perhaps everyone else encountering
issues with your website. It appears as if some of the text on your posts are running off the screen. Can someone else please comment and let
me know if this is happening to them as well?
This may be a issue with my web browser because I’ve had this happen before.
Many thanks
It’s an amazing article for all the internet people; they will
obtain advantage from it I am sure.
It’s truly very difficult in this busy life to listen news on Television, thus I simply use world
wide web for that reason, and get the hottest news.