NET IIS Crit Absolute Path Vulnerability _ security-related

Title:microsoft asp.net may disclose Web Directory to Remote Users in Certain Cases
Description:if the ASP.net application does not filter the error message, the Web
Directory information may is disclosed to remote users by using a unavailable file
which start with "~".
Hi, I ' m Soroush Dalili from Grayhatz security Group (GSG). I found new thing in. NET
Framework version:1.1 (. ASPX Files).
If error mode in. NET configuration was on, Run a unavailable aspx file that start with
"~" can cause showing full path in browsers.
For example:http://[url]/~foo.aspx
------------------------------------------------------------------------
Note:version 2 have not a bug and it return file does not exist

Vendor URL:www.microsoft.com
version:1.1
Soloution:update to version 2 or enable error filtering
Finder:soroush Dalili
TEAM:GSG [Grayhatz Security Group]
Web:grayhatz.net
Country:iran
Email:irsdl[a.t]yahoo[d.o.t]com


Search engine inurl:aspx, and then casually point a connection, after the URL input ~fly_ocean.aspx, you can burst out the absolute path.

For example:
Http://www.fodonline.com/qihuoju/default.aspx~fly_ocean.aspx
The filename used for monitoring is not valid: "D:\aaa\qihuoju\default.aspx~fly_ocean.aspx". The file name used for monitoring must have an absolute path and does not contain a wildcard character.
Version information: Microsoft. NET Framework Version: 1.1.4322.2300; asp.net version: 1.1.4322.2300