jimbo
04-15-2000, 02:49 AM
This is an excerpt from an article about a Security Flaw in NT 4 and IIS located at: http://www.zdnet.com/zdnn/stories/news/0,4586,2550735,00.html
However, the file is part of the default installation of Web servers using NT 4.0 and Microsoft's Internet Information Service software, making it fairly common. "It breaks the absolute wall between Web sites on a shared server," said Steve Lipner, manager of Microsoft's security response center. "But you can't see anything that you're not authorized to by the access controllers."
By far the most interesting aspect of the flawed DLL is that it also contained a phrase deriding Netscape engineers.
Reports focused on a phrase -- "!seineew era sreenigne epacsteN" -- or the backwards spelling of "Netscape engineers are weenies!" But NTBugTraq's Cooper and Microsoft both stressed that the phrase is not a password but a cypher key used to scramble the address of Web pages requested by users.
Reading that article made me dislike MSFT even more than I already do...
However, the file is part of the default installation of Web servers using NT 4.0 and Microsoft's Internet Information Service software, making it fairly common. "It breaks the absolute wall between Web sites on a shared server," said Steve Lipner, manager of Microsoft's security response center. "But you can't see anything that you're not authorized to by the access controllers."
By far the most interesting aspect of the flawed DLL is that it also contained a phrase deriding Netscape engineers.
Reports focused on a phrase -- "!seineew era sreenigne epacsteN" -- or the backwards spelling of "Netscape engineers are weenies!" But NTBugTraq's Cooper and Microsoft both stressed that the phrase is not a password but a cypher key used to scramble the address of Web pages requested by users.
Reading that article made me dislike MSFT even more than I already do...