IIS Services Stop if Virtual Root Deleted on Disk

From: Greg Chatten - St. Louis Internet (gchatten@ST-LOUIS.NET)
Date: 02/05/02 

Date:         Mon, 4 Feb 2002 21:03:01 -0600
From: "Greg Chatten - St. Louis Internet" <gchatten@ST-LOUIS.NET>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

We are on NT4/SP6A + Security Rollup

While running fine weeks on end, today we had IIS ADMIN and IIS WWW Services
stop (at random times but frequent - we think about every 10 minutes).

Our automated monitoring programs restarted the services and all was well,
however, the following were noted in the System Event Log:

#1:
        The server was unable to add the virtual root " for the directory
'E:\user-data\paradigm\focus-stl' due to the following error: The system
cannot find the path specified. The data is the error code.

#2:
        The server was unable to add the virtual root " for the directory
'E:\user-data\ubrnetmall\TNI' due to the following error: The system cannot
find the path specified. The data is the error code.

In both the above cases we had IIS Console entries for valid domains
pointing to these directories. The customer has FTP access and decided to
remove the directories entirely via FTP. The removal of the directories
caused both IIS services mentioned above to STOP.

Once the offending entries were removed from the IIS console everything has
functioned normally. NOTE: Stopping the offending entry in IIS console
does *not* solve the problem - you have to delete it entirely...

In the real world, our resellers are setup with a directory structure as
follows:
        e:\user-data\reseller\customer
        e:\user-data\reseller\customer1
        .
        .
        e:\user-data\reseller\customer5

When they add a hosted domain they tell us which directory
(customer...customer5) is the root and we make the entry in IIS. If the
reseller removes a root we defined in IIS the above problem is created
rendering IIS useless. You will al

This is a MS bug-to-boot and takes your entire server out of business.

Regards,

Greg Chatten
St. Louis Internet, Inc.
http://www.st-louis.net
636-458-2866
Fax: 314-215-4161

oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Delivery co-sponsored by Qualys - Make Your Network Secure
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Go Beyond PARTIAL Security: FREE White Paper

Stop hassling with half-baked ENTERPRISE SECURITY.
FREE White Paper shows you how to ensure TOTAL security for your Internet
perimeter with the most current and most complete PROACTIVE Vulnerability
Assessment solution. Get your FREE White Paper now. Click here!
https://www.qualys.com/forms/techwhite_86.html
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

Relevant Pages

  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • RE: .pdf security using ASP.NET security...
    ... I am wondering if using the aspnet_isapi.dll to handle PDF files security ... IIS has a list of Application Mappings which dictate whether a particular ... entries that tell aspnet_isapi.dll what to do with various file types. ... Files that do have app mappings require all the same steps, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: impact of mapping .??? to ASP.NET ISAPI???
    ... security issue, either from ASP.NET or IIS (this is something that my ISP ... > entries that tell aspnet_isapi.dll what to do with various file types. ... > process the request. ...
    (microsoft.public.dotnet.framework.aspnet.security)