Thanks all, some good pointers to research into. Spent a while trying to replicate the traversal attack in virtual pc using NT 4/2000/2003 trying IIS4 , IIS5 and IIS6 and I was able to replicate the attack on IIS 4 and 5 but not 6.