Blog Posts Tagged with "IIS6" : The Official Microsoft IIS Site

FTP recursive list after applying MS09-053

Oct 15, 2009

We recently released fixes for the publicly disclosed FTP vulnerabilities. One of the after-effects of applying this update will be that recursive list commands to IIS FTP 5.x, 6.0 will return the non-recursive listing. To make it clear, this feature...

0 comments Tags: IIS6 IIS7 IIS5X FTP

Fixes released for FTP vulnerabilities

Oct 15, 2009

Microsoft has released security bulletin MS09-053 that will address the FTP vulnerabilities that were publicly disclosed a couple of weeks ago. The information in this bulletin supercedes the previous advisory.

1 comments Tags: IIS6 IIS7 Windows Security IIS5X FTP

[Updated] IIS FTP server vulnerabilities for FTP 5.x and FTP 6

Sep 04, 2009

There have been two recently publicly disclosed vulnerabilities for FTP 5, FTP 5.1 and FTP 6. Wade has gone through great detail to explain what platforms are affected by each vulnerability in his blog post . Microsoft has released and refreshed an advisory...

2 comments Tags: IIS6 IIS7 Windows Security IIS5X FTP

Updated advisory for FTP Vulnerability on IIS

Sep 04, 2009

The public exposure of another vulnerability in the FTP stack has caused a revision in the Microsoft advisory. Please refer the advisory @ http://www.microsoft.com/technet/security/advisory/975191.mspx to get updated information on exposure and impact...

0 comments Tags: IIS6 IIS7 Windows Security IIS5X FTP

“Parser Error Message: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.” when .net page has debug=”true”

Jul 20, 2009

Recently, I came across an issue where the customer faced an FIPS (Federal Information Processing Standards) related error on the .aspx pages which had debug=”true”. His ASP.net application was hosted on IIS7 running on Windows Server 2008 SP2. And, he...

6 comments Tags: IIS7 ASP.NET IIS6 FIPS .NET

Troubleshooting HTTP 401.3 errors with Process Monitor

Jun 25, 2009

Last week I posted the following blog which showed how to use Process Monitor to troubleshoot service startup issues. http://blogs.msdn.com/webtopics/archive/2009/06/16/troubleshooting-service-startup-issues-with-process-monitor.aspx To continue on that...

9 comments Tags: IIS HTTP IIS6 security Tools Access Denied Authentication

Troubleshooting service startup issues with Process Monitor

Jun 16, 2009

Many things can cause a service, like IIS’s World Wide Web Publishing Service, to fail on startup. When troubleshooting such an issue, Process Monitor can be an invaluable tool. What Process Monitor does is monitor all File and Registry access on the...

1 comments Tags: IIS IIS6 security Logging Tools

Update for WebDAV vulnerability on IIS 5.x and IIS 6

Jun 09, 2009

We now have a security update available to address the WebDAV extension vulnerability reported earlier. All customers affected should apply the update even if they have mitigated the issue through a workaround. The background here is that we had an encoding...

0 comments Tags: IIS6 Windows Security IIS5X WebDAV