Workaround:IIRC, the AS installation sets up the IIS script mappings to "Check that file exists" by default. However, I usually switch that off so I can access $ENV{PATH_INFO} which is unavailable with that option. Thanks for the warning.
===================
Edit "perlIS.dll" ISAPI extension in Internet Service Manager and check "Check that file exists" option.
In reply to Re: Perl/ISAPI Security Hole
by $code or die
in thread Perl/ISAPI Security Hole
by Ovid
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |