OWA (exchange 5.5) broken by patching?

From: Jared Ingersoll (jared_at_cswv.com)
Date: 04/15/04

  • Next message: Drew Simonis: "Location Aware GPO question" 
    To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Thu, 15 Apr 2004 07:57:51 -0400

    Hi,

    I was wondering if anyone else experienced the problem of Outlook Web Access
    breaking (running on win2k/exchange 5.5. sp4) after applying the numerous
    patches from MS yesterday (MS04-011 thru 014,
    http://www.microsoft.com/technet/security/bulletin/winapr04.mspx)? We use
    the IIS lockdown tool on the server, and part of this disables references to
    "parent paths" in the asp app. After applying the patches and rebooting,
    folks are able to get to the login page, but after entering their
    username/pw, they get a script error saying something like:

    Active Server Pages error 'ASP 0131'

    Disallowed Parent Path

    /exchange/USA/inbox/main_fr.asp, line 3

    The Include file '../constant.inc' cannot contain '..' to indicate the
    parent directory.

    The only way to fix this is to enable "parent paths" under the exchange
    virtual directory app settings in IIS.

    Jared

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Drew Simonis: "Location Aware GPO question"
    • Quantcast