bugtraq - IIS Unicode still a threat?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY107-F11E37C55EF87891C298A1D90EB0@phx.gbl>
Date: Wed, 22 Jun 2005 16:04:45 +0000
From: "James Bower" <hando311@...mail.com>
To: bugtraq@...urityfocus.com, nessus@...t.nessus.org,
	pen-test@...urityfocus.com
Subject: IIS Unicode still a threat?

Hello everyone, I was interested in learning about unicode exploits in IIS 
5.0 so I created a Windows 2000 Server and IIS 5.0 and was able to find a 
lot of information about this subject after googling it and playing around 
with it.  My question is, is unicode still a real threat in IIS 6.0?  And if 
so, if you guys could please give me some links of some pages and papers 
that discuss newer use of unicode.

Thanks,