NT Versions Affected:

4.0

Problem:

A URL such as http://www.domain.com/scripts/exploit.bat>PATH\target.bat will create a file 'target.bat''.

If the file 'target.bat' exists, the file will be truncated.

Verification:

http://www.omna.com/iis-bug.htm