Related to this bug: used to be a vulnerability in IIS back in the late 90s wher... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

duncans on July 20, 2016 | parent | context | favorite | on: Git for Windows accidentally creates NTFS alternat...

Related to this bug: used to be a vulnerability in IIS back in the late 90s where you could append ::$DATA to a file name (e.g Foo.asp::$DATA) and download a server-side script's source code.

jameshart on July 20, 2016 [–]

Related - meaning the ::$DATA was interpreted as a request for an alternate data stream from the file, and then read the default stream?

duncans on July 20, 2016 | [–]

More info https://technet.microsoft.com/en-us/library/security/ms98-00... - seems to imply that $DATA is the default stream.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact