Re: ASP trouble with IIS 6.0 security

From: aruna (arunah_at_slt.lk)
Date: 04/29/04

  • Next message: Bénoni MARTIN: "RE: ASP trouble with IIS 6.0 security" 
    To: "Kinyon, Rob" <Rob.Kinyon@progressive-medical.com>, Bénoni MARTIN <Benoni.MARTIN@libertis.ga>, <security-basics@securityfocus.com>
Date: Thu, 29 Apr 2004 12:31:28 +0600

    Hello All,

    Is there any method/modules needed to run ASP applications on Apache over a
    UNIX box.
    We are currently running a UNIX based shared Hosting server with Perl and
    PHP support , but customers ask
    to run ASP applications as well.
    Are there any security risks involved ?
    Appreciate for any help.

    Thanks

    aruna
    ----- Original Message -----
    From: "Kinyon, Rob" <Rob.Kinyon@progressive-medical.com>
    To: "Bénoni MARTIN" <Benoni.MARTIN@libertis.ga>;
    <security-basics@securityfocus.com>
    Sent: Wednesday, April 28, 2004 11:19 PM
    Subject: RE: ASP trouble with IIS 6.0 security

    > You can set up Apache on Win2k3, either natively (if you have a compiler)
    or using Cygwin, a free Unix emulator for Window.
    >
    > As for the SQL*Server, anything that can talk to a Sybase database can
    talk to a SQL*Server database. (I did this at a prior client.)
    >
    > -----Original Message-----
    > From: Bénoni MARTIN [mailto:Benoni.MARTIN@libertis.ga]
    > Sent: Wednesday, April 28, 2004 11:03 AM
    > To: security-basics@securityfocus.com
    > Subject: ASP trouble with IIS 6.0 security
    >
    >
    > Hi community,
    >
    > I am running IIS 6.0 under a W2K3 box, and most of my web pages have been
    written in ASP with Dreamweaver 2004 (I don't think this is really
    important, but...). Some of my ASP pages run into trouble: sometimes they
    are displayed in the right way, but sometimes they create a "NTTP 500 -
    Internal error". Looking around the web, seems to me I am not the only one
    to face this trouble, but no solution has been found...
    >
    > Seems also that a new security feature in IIS 6.0 performs this, but which
    one??? I just cannot set up a Linux box with Apache as I have an SQL Server
    2000...
    >
    > What can I do? Get back to IIS 5.x does not seems to be a good idea...
    >
    > Any idea will be welcomed!
    >
    > Cheers!
    >
    >
    > --------------------------------------------------------------------------
    -
    > Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
    > any course! All of our class sizes are guaranteed to be 10 students or
    less
    > to facilitate one-on-one interaction with one of our expert instructors.
    > Attend a course taught by an expert instructor with years of in-the-field
    > pen testing experience in our state of the art hacking lab. Master the
    skills
    > of an Ethical Hacker to better assess the security of your organization.
    > Visit us at:
    > http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    > -------------------------------------------------------------------------- 

    --
>
>
> --------------------------------------------------------------------------
-
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
> any course! All of our class sizes are guaranteed to be 10 students or
less
> to facilitate one-on-one interaction with one of our expert instructors.
> Attend a course taught by an expert instructor with years of in-the-field
> pen testing experience in our state of the art hacking lab. Master the
skills
> of an Ethical Hacker to better assess the security of your organization.
> Visit us at:
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> --------------------------------------------------------------------------
--
>
>
---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
  • Next message: Bénoni MARTIN: "RE: ASP trouble with IIS 6.0 security"

    Relevant Pages

    • RE: PacketShaper
      ... we're deploying these along with firewalls in our managed security ... >>Ethical Hacking at the InfoSec Institute. ... >>Attend a course taught by an expert instructor with years of ... >>pen testing experience in our state of the art hacking lab. ...
      (Pen-Test)
    • Re: Password trading problem
      ... > I'm in charge of doing a security review of it. ... > e-mail and any attachments is strictly prohibited. ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: securing password list
      ... What security methods do you use to secure a list such as this? ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • RE: Online Universities with Information Security Programs
      ... Online Universitties with Information Security Programs ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)
    • Re: Security issues in publishing content of /etc ?
      ... just check permisions... ... > I believe the security issue here is that there will be no secrets for anyone who wants ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
      (Security-Basics)