Secunia

Parcifal Aertssen has reported a security issue in Microsoft Internet Information Services (IIS), which can be exploited by malicious people to make requests without being logged.

The problem is that "TRACK" requests aren't logged to the IIS log files. This can be exploited to make anonymous probes or generate traffic without being logged by the web server.

The issue has only been reported in version 5.0. Version 6.0 is not affected.

Solution
Log requests using a proxy, firewall, or an IDS system.
Further details available in Customer Area

Provided and/or discovered by
Parcifal Aertssen

Original Advisory
Microsoft IIS Logging Failure
http://www.aqtronix.com/Advisories/AQ-2003-02.txt

Deep Links
Links available in Customer Area