admin
06-13-2003, 08:29 PM
The unicode bug is a bug in the UNICODE character set which is installed with IIS4.0/5.0 which usually runs on NT4/Win2k respectively. As rfp put in his wiretrip.net post, \"IIS seems to decode UNICODE at the wrong instance (after path checking, rather than before).\" And so it is exploitable.