AOH :: Windows Apps :: WIN4962.HTM

Active perl reveals paths

31th Dec 2001 [SBWID-4962]
COMMAND

	Active perl reveals paths

SYSTEMS AFFECTED

	Active perl ??

PROBLEM

	Antoan Miroslavov found :
	

	If you request name with .pl extension which doesn\'t exist  in  CGI-BIN
	Perl Interpreter  returns  an  error:\"CGI  Error\"  The  specified  CGI
	application misbehaved by not returning a complete set of HTTP  headers.
	The headers it did return are:
	

	Can\'t open perl script \"C:\\Inetpub\\wwwroot\\cgi-

	bin\\link1s.pl\": No such file or directory

	

	

	

SOLUTION

	Any extension that  IIS  maps  to  C:\\perl\\bin\\Perl.exe  causes  this
	problem (not necessarily .pl).
	

	You can define a custom error page for 502 errors to hide your path.

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.