Re: IIS5 can't download exe files

• Previous message: BB: "Re: URLScan and SQL Injection"
• In reply to: Tom Babich: "Re: IIS5 can't download exe files"
• Next in thread: Mark McCasland: "Re: can't download exe files"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "BB" <Bernard_at_3exp.com>
Date: Sun, 20 Apr 2003 12:24:06 +0800

If you right click and 'save target as' does it give you 404 response ?
make sure the IIS directory permission is set to none or script only.

what's the http status for such request in IIS log ?

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
"Tom Babich" <TomBabich@firstgate.net> wrote in message
news:4484ad27.0304190305.4ffa4c31@posting.google.com...
> Kosmo, Jeff, Przemo,
>
> I'm having the same problem and it seems to be a Service Pack bug
> introduced into IIS5 under Windows 2000 Server that has nothing to do
> with the lockdown tool/URLScan; I never ran either of them, only the
> service pack.
>  Everytime an IE6 (or IE5.5) client attempts to download an exe, the
> process count on the server increases by 2 - an instance of RUNDLL32
> and another process hang, and if the volume is turned up on the server
> the 'server threw an exception' wav file will play.
> Strangely, while IE5.5 and IE6 on NT, Win2K, XP and Win9x clients
> cause this problem, I tested an old version of Netscape (3.x) which
> was able to download the executables from IIS5 without causing an
> exception or hanging any processes.
> The bug most likely has to do with the handshake that occurs between
> IIS5 and the IE clients when .exe files are downloaded; perhaps the
> programmers in the service pack team never saw the error because they
> had the Lockdown tool/URLScan configured to prevent the download of
> exe files and thus would never notice that attempting to download them
> would cause an exception and hang multiple processes on the server -
> this seems to be a major programming error that would be very
> difficult to miss otherwise.
>
>  Has anyone had any luck resolving this issue?
>
>  Please don't suggest distributing old versions of Netscape...
>
>
>
> jcochran.nospam@naplesgov.com (Jeff Cochran) wrote in message
news:<3ea50a32.285769374@msnews.microsoft.com>...
> > On Thu, 17 Apr 2003 12:18:55 -0700, "Kosmo" <dweeil@hotmail.com>
> > wrote:
> >
> > >why is iis5 displaying a 404 error when you try to
> > >download an exe file? If I change the file extension it
> > >downloads without any problems.
> >
> > Running the lockdown tool/URLScan and forgot to enable the EXE
> > extension...?
> >
> > Jeff

• Previous message: BB: "Re: URLScan and SQL Injection"
• In reply to: Tom Babich: "Re: IIS5 can't download exe files"
• Next in thread: Mark McCasland: "Re: can't download exe files"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]