CEH course questions

i have been reading the certified ethical hacker course a friend gave to me and i have a couple of questions under the web server hacking section.

I'll post some here but i would like if i could pm someone about this so not to disrupt the forums to much

1. it says in Apache that a URL with a large amount of trailing slashes will produce a Dir listing

example …/cgi-bin/////////////////////////////////////////

it doesn't explain why this happens and i am having a hard time with Google.

2)IIS. it says appending a +.htr onto a .asp will cause the server to reveal its own script. again why?

can i would like to pm someone with questions like these.

thank you for your time

thanks spy.

2: http://www.microsoft.com/technet/security/bulletin/MS01-004.mspx

just a guess on #2 (I don't know), but if it is told it needs to execute .asp script then it wont care about executing the other stuff, and will just post it.

actually its becasue there is a htr file and adding that make the htr file execute the requested file