Enabling Parent Paths

Are there any security risks?

[defanjos]

Are there any security risks in enabling Parent Paths in Windows 2003 server? It comes disabled by default.

[Xoc]

I think it would allow you to navigate up from a directory to other content elsewhere. So if someone could upload something on your web site, they would be able to have it navigate to somewhere else on your server.

I consider this to be a minor security flaw, because if they can get something on your server, you are already hosed.

If anyone can think of a way to use this maliciously without being able to upload, let's hear about it.