Description
Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode.
References
- 2909 vdb-entry
- iis-unicode-asp-disclosure(6742) vdb-entry
- 20010622 [VIGILANTE-2001001] ASP source code retrieved with Unicode extens ion mailing-list