Re: Problem with locked down IIS and viewing PDFs

From: John Kenyon (john.kenyon@freshspark.com)
Date: 05/16/02


From: "John Kenyon" <john.kenyon@freshspark.com>
Date: Thu, 16 May 2002 10:41:46 -0500


Have you applied the patch with MS02-18? This is a known issue that is
supposed to be fixed in that patch.

As for a workaround, you need to set RemoveServerHeader=0 in the URLScan.ini
file.

Check out KB article #Q316864
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q316864

If your problem is still not fixed and you have MS02-18 applied, PLEASE post
back here. I am running into a related problem with Windows Media (.asf)
files and am interested in any other input people might have.

- John K.

"Jon Forster" <jon.forster@uk.nomura.com> wrote in message
news:#xkErHM$BHA.1848@tkmsftngp05...
>
> We have a locked down IIS 5.0 running on Windows2000 and have found that
> when we go to view PDF documents on the site we get the following error:
>
> File does not begin with %PDF.
>
> It worked before we locked the server down and we have checked the file
and
> it is not malformed in any way. I have read that backing out the
IISLockdown
> changes will fix this problem, however, we must have the server locked
down
> so I was wondering if anybody knows a workaround. I have searched the
> Microsoft site to no avail.
>
> regards
>
> Jon
>
>



Relevant Pages

  • Problem with locked down IIS and viewing PDFs
    ... We have a locked down IIS 5.0 running on Windows2000 and have found that ... when we go to view PDF documents on the site we get the following error: ... so I was wondering if anybody knows a workaround. ... Microsoft site to no avail. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Microsoft Security Bulletin MS03-010 - 331953
    ... No patch for NT4, workaround is to place the system behind a firewall. ... What about internal threats? ... > The Microsoft Security Response Center has released Microsoft Security ...
    (microsoft.public.win2000.security)
  • Re: CONFIG_VFAT_FS_DUALNAMES regressions
    ... If we have a workaround that is truely compatible with stuff and has no ... interoperability problems are acceptable, especially for file systems. ... Why - because the failure case is defined ("Sorry can't play ... long name creation" patch from May. ...
    (Linux-Kernel)
  • Re: IE6 form POST operation sporadic after sp KB832894 install
    ... We have configured our Apache 1.3.x web server to turn ... # The following directives modify normal HTTP response ... after I installed the latest IE patch and I cannot seem to ... I believe that his workaround fixes the problem for us. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: [git head] X86_PAT & mprotect
    ... On Sat, May 10, 2008 at 6:05 AM, Venki Pallipadi ... I like your modified patch. ... Split up the patch into two parts as the pci part was unrelated to mprotect ... Some versions of X used the mprotect workaround to change caching type from ...
    (Linux-Kernel)