First described by mnemonix on Febuary 24, 1999, in NTBugtraq post; http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9902&L=ntbugtraq&F=P&S=&P=5572 (URL is wrapped to more than one line, you must reconnect the pieces for it to work properly) Cheers, Russ - NTBugtraq Editor -----Original Message----- From: JeiAr [mailto:jeiar@kmfms.com] Sent: Saturday, May 03, 2003 3:58 AM To: bugtraq@securityfocus.com Subject: Microsoft IIS Authentication Manager Account Conformation Vuln? Let me start off by saying that im not sure if this already exists, but i have never heard of it and neither has anyone i asked. <snip>