Re: IIS5 can't download exe files
From: Tom Babich (TomBabich@firstgate.net)
Date: 04/19/03
- Next message: Karl Levinson [x y], mvp: "Re: "User must change password at next logon" and Integrated Windows Authentication"
- Previous message: BB: "Re: URLScan and SQL Injection"
- In reply to: Jeff Cochran: "Re: can't download exe files"
- Next in thread: BB: "Re: IIS5 can't download exe files"
- Reply: BB: "Re: IIS5 can't download exe files"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: TomBabich@firstgate.net (Tom Babich) Date: 19 Apr 2003 04:05:29 -0700
Kosmo, Jeff, Przemo,
I'm having the same problem and it seems to be a Service Pack bug
introduced into IIS5 under Windows 2000 Server that has nothing to do
with the lockdown tool/URLScan; I never ran either of them, only the
service pack.
Everytime an IE6 (or IE5.5) client attempts to download an exe, the
process count on the server increases by 2 - an instance of RUNDLL32
and another process hang, and if the volume is turned up on the server
the 'server threw an exception' wav file will play.
Strangely, while IE5.5 and IE6 on NT, Win2K, XP and Win9x clients
cause this problem, I tested an old version of Netscape (3.x) which
was able to download the executables from IIS5 without causing an
exception or hanging any processes.
The bug most likely has to do with the handshake that occurs between
IIS5 and the IE clients when .exe files are downloaded; perhaps the
programmers in the service pack team never saw the error because they
had the Lockdown tool/URLScan configured to prevent the download of
exe files and thus would never notice that attempting to download them
would cause an exception and hang multiple processes on the server -
this seems to be a major programming error that would be very
difficult to miss otherwise.
Has anyone had any luck resolving this issue?
Please don't suggest distributing old versions of Netscape...
jcochran.nospam@naplesgov.com (Jeff Cochran) wrote in message news:<3ea50a32.285769374@msnews.microsoft.com>...
> On Thu, 17 Apr 2003 12:18:55 -0700, "Kosmo" <dweeil@hotmail.com>
> wrote:
>
> >why is iis5 displaying a 404 error when you try to
> >download an exe file? If I change the file extension it
> >downloads without any problems.
>
> Running the lockdown tool/URLScan and forgot to enable the EXE
> extension...?
>
> Jeff
- Next message: Karl Levinson [x y], mvp: "Re: "User must change password at next logon" and Integrated Windows Authentication"
- Previous message: BB: "Re: URLScan and SQL Injection"
- In reply to: Jeff Cochran: "Re: can't download exe files"
- Next in thread: BB: "Re: IIS5 can't download exe files"
- Reply: BB: "Re: IIS5 can't download exe files"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
