IIS still revealing paths for web directories

[Michael Howard]

here's the low-down.

1) if you don't use ida or idq files then nuke the mappings in iis.
2) if you do use them, then make sure the "Check file exists" option is
checked
3) we are working on a fix and doing 'due-diligence' to make sure
there's nothing similar or regressions
4) we'll post the fix once (3) is complete

thanks!

Cheers, Michael Howard
Windows 2000 Security
Got an 'Access Denied' problem? Check the appropriate logs first!

smime.p7s