IIS vulnerability
Thu, 28 Jul 2005 06:01:04 -0700
Hi,
I am hoping you can help me with and "interesting" issue. My company has
recently had a security audity. As a result of the audit we were found to
have 2 very prevelant vulnerabilities. I have been tasked with finding out
the rmaifications of these for IIS and HIS. I am hoping you can point me in
r ...
|
WriteClient Question(s) .. again .. i know your bored of these now .. but Wade or David if your listening please help!
Tue, 26 Jul 2005 21:19:08 +0100
I have a ISAPI filter living inside ISA (should work in IIS.. it uses no
fancy WPX notifications) and i have a couple of outstanding issues i would
like to know the definitive answer to.
I have read various things regarding WriteClient and its "quirks"... all i
need to understand is if i have a filter tha ...
|
Problm with WriteClient in CHttpFilterContext in IIS6
Tue, 26 Jul 2005 17:50:09 +0800
Hi, all
My writeClient() send a simple html context to client. In IIS5, it work
well, IE in client can display this html successfully. But in IIS6, client
can not display this html.
Any idea?
Thank you!
...
|
What's the different of extension and filter?
Tue, 26 Jul 2005 14:05:56 +0800
It seems that extension almost can replace filter in lots of function. Is
there any function that only filter can implement?
Does "Perform custom authentication" belong to such a function?
...
|
Creating ISAPI Filter for client authorization based on Basic auth type.
23 Jul 2005 12:04:02 -0700
Hi all.
I have problem with creating isapi filter for client authorization,
based on basic authorization, i see previous topics and not found
complete desiction my problem.
that I have:
file with auth. users format like this:
[c:\some\path\some_dir\] [userlogin] [userpass]
[c:\some\path\some_d ...
|
Creating New Projects within a Solution that Clone the Properties of Prior Projects
Fri, 22 Jul 2005 14:39:43 -0700
Hi!
I'm migrating a bunch of ISAPI modules originally coded in Borland C++ to
VC++ 7.0. I'd like to put all the ISAPI modules as multiple projects within
the same VC++ solution.
When adding a new project to the solution, I get the default C++ console
project properties which have to be modified consid ...
|
If i get an HTTP error (eg statu 500) during a transfer should ISA generate a new filter context????
Fri, 22 Jul 2005 12:02:46 +0100
During a transfer of data - if the server generates an error, should i get a
brand new filter context?
In a SF_NOTIFY_SEND_RAW_DATA if an error occurs after the first data chunk
has been sent
Packet 1 - Contains correct chunked header information,
/// ERROR occurred on server .. server sends status 500 cont ...
|
|
|
Upgrading ISAPI extension from VC++ 6 to VC7.1
Fri, 22 Jul 2005 02:47:05 -0700
I'm currently upgrading an existing ISAPI extension originaly coded in
Developer Studio 6 to .Net 2003 (Still C++ though... VC7.1?).
A number of things are troubling me, and the ISAPI extension doesn't appear
to be working very well. I'm not sure if they're related.
Firstly I'm getting *lots* of these:
...
|
Sharing data between DLLs
Mon, 18 Jul 2005 18:02:04 -0400
Hello,
I followed the instructions from the following link with no success:
http://support.microsoft.com/kb/q125677
What I'd like to do is:
I have two DLLs that need to share a variable. The first DLL sets the
variable and the second DLL clears it.
In the first DLL's source code, I added the following ...
|
Certificate "insertion" via ISAPI
Mon, 18 Jul 2005 15:25:12 -0400
Ok, this may be silly but is it possible to insert a client certificate into
a request. I know I can read certificate data but I wanted to insert the
certificate into the request for purposes of authentication so that an IIS
site that was configured for certificate mapping could be manipulated
programatica ...
|