.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
Security issue (RESOLVED, but is it a .Net bug?)(NO ANSWER YET)
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngescalate' list.


=?iso-8859-1?Q?Andr=E9_Colbi=F6rnsen?=
I have tried to have comments or answers for this during the last weeek,
but noone seems to have an opinion. This is an excerpt of a thread
between my ISP and someone at a Microsoft Security list regarding naming
of folders under IIS which seem to effect only .Net:

/////////////////////////////// Snip ////////////////////////////////

I got the following answer to the problem in the newsgroup
"microsoft.public.dotnet.framework.aspnet.security"

<<<
uh.. "firstweb" has 8 characters... "secondweb" has 9... now.. having
that in mind.. make sure ASPNET account has read permissions on the
whole structure above. kinda weird..

i can't remember what the problem was.. when the directory has more than
8 characters.. try hitting the knowledge base..

PS.. try renaming "firstweb" to "firstweb1" -- see if you get the same
error..
>>>

**************** My comment: This seems to be the core of the problem
***

I thought this was very far fetched but as the directory to your web was
called "\webhot\familylife.se\http\" I decided to tried setting it to
"\webhot\family__.se\http\" in the old MSDos way (8.3) and VOILA it
worked.

**************** My comment: End
****************************************

As I said before, the web worked fine with html and asp pages so I do
not think this is a faulth in the IIS 5 so it must be either an error in
the config of aspdotnet or un bug of some kind. The config we have so
far is the one that comes with the standard install and with this in
mind I would still call it a bug in aspdotnet but thats just me :)

I'm glad that it works now and hope to see some nice prof of what you
can do with this aspdotnet in the near future.

BTW! Please try to get som complaints through to the people in charge of
aspdotnet so that this might get fixed.

/////////////////////////////// Snip ////////////////////////////////

I believe this to be very odd, and hopefully there is another
explanation to this problem than it being a bug. I would appreciate
comments from Microsoft on this, unless of course somebody else can
supply me with a perfectly good explanation.

Regards/H=E4lsningar

Andr=E9 Colbi=F6rnsen
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
Sonnenburg Communications
Bergsgatan 3,
SE-211 54 Malm=F6
Sweden
Tel.: +46-(0)40-97 78 80
Fax.: +46-(0)40-97 78 80
Mob.: +46-(0)708-97 78 79
Mail: Click here to reveal e-mail address
Web.: www.sonnenburg.se
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
Reply to this message...
 
    
Brad Kingsley
I can't comment on why this happened at this particular host, but I can tell
you that we have MANY ASP.Net sites whose folder names are longer than 8
characters and we have not seen this issue.

~Brad Kingsley
Microsoft MVP - ASP
Windows 2000 MCSE

http://www.orcsweb.com/
Windows 2000 Advanced Hosting
#1 in Service and Support

----- Original Message -----
From: "André Colbiörnsen" <Click here to reveal e-mail address>
To: "aspngescalate" <Click here to reveal e-mail address>
Sent: Wednesday, April 10, 2002 4:28 AM
Subject: [aspngescalate] Security issue (RESOLVED, but is it a .Net bug?)(NO
ANSWER YET)

I have tried to have comments or answers for this during the last weeek,
but noone seems to have an opinion. This is an excerpt of a thread
between my ISP and someone at a Microsoft Security list regarding naming
of folders under IIS which seem to effect only .Net:

/////////////////////////////// Snip ////////////////////////////////

I got the following answer to the problem in the newsgroup
"microsoft.public.dotnet.framework.aspnet.security"

<<<
uh.. "firstweb" has 8 characters... "secondweb" has 9... now.. having
that in mind.. make sure ASPNET account has read permissions on the
whole structure above. kinda weird..

i can't remember what the problem was.. when the directory has more than
8 characters.. try hitting the knowledge base..

PS.. try renaming "firstweb" to "firstweb1" -- see if you get the same
error..
>>>

**************** My comment: This seems to be the core of the problem
***

I thought this was very far fetched but as the directory to your web was
called "\webhot\familylife.se\http\" I decided to tried setting it to
"\webhot\family__.se\http\" in the old MSDos way (8.3) and VOILA it
worked.

**************** My comment: End
****************************************

As I said before, the web worked fine with html and asp pages so I do
not think this is a faulth in the IIS 5 so it must be either an error in
the config of aspdotnet or un bug of some kind. The config we have so
far is the one that comes with the standard install and with this in
mind I would still call it a bug in aspdotnet but thats just me :)

I'm glad that it works now and hope to see some nice prof of what you
can do with this aspdotnet in the near future.

BTW! Please try to get som complaints through to the people in charge of
aspdotnet so that this might get fixed.

/////////////////////////////// Snip ////////////////////////////////

I believe this to be very odd, and hopefully there is another
explanation to this problem than it being a bug. I would appreciate
comments from Microsoft on this, unless of course somebody else can
supply me with a perfectly good explanation.

Regards/Hälsningar

André Colbiörnsen
================================
Sonnenburg Communications
Bergsgatan 3,
SE-211 54 Malmö
Sweden
Tel.: +46-(0)40-97 78 80
Fax.: +46-(0)40-97 78 80
Mob.: +46-(0)708-97 78 79
Mail: Click here to reveal e-mail address
Web.: www.sonnenburg.se
================================

| [aspngescalate] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngescalate.asp = JOIN/QUIT
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
Reply to this message...
 
    
Brad Kingsley
I've seen the threads in the newsgroups but have not been able to reproduce
this error on any of 5 different servers I've tried. I have no idea why a
few hosts are seeing this issue.

~Brad Kingsley
Microsoft MVP - ASP
Windows 2000 MCSE

http://www.orcsweb.com/
Windows 2000 Advanced Hosting
#1 in Service and Support

----- Original Message -----
From: "André Colbiörnsen" <Click here to reveal e-mail address>
To: <Click here to reveal e-mail address>
Sent: Wednesday, April 10, 2002 7:39 AM
Subject: SV: [aspngescalate] Re: Security issue (RESOLVED, but is it a .Net
bug?)(NO ANSWER YET)

Have you any idea of what this can be. I mean, it obviously has been and
issue with others, as this rather cryptic message from someone with the
microsoft.public.dotnet.framework.aspnet.security list had had the same
or a similar problem:

//////// SNIP //////////////////
uh.. "firstweb" has 8 characters... "secondweb" has 9... now.. having
that in mind.. make sure ASPNET account has read permissions on the
whole structure above. kinda weird..
i can't remember what the problem was.. when the directory has more than
8 characters.. try hitting the knowledge base..
PS.. try renaming "firstweb" to "firstweb1" -- see if you get the same
error..
//////// SNIP //////////////////

Could it have to with the naming of the folder, as this works
("\webhot\family__.se\http\"), but this doesn't
("\webhot\familylife.se\http\")?

Regards/Hälsningar

André Colbiörnsen
================================
Sonnenburg Communications
Bergsgatan 3,
SE-211 54 Malmö
Sweden
Tel.: +46-(0)40-97 78 80
Fax.: +46-(0)40-97 78 80
Mob.: +46-(0)708-97 78 79
Mail: Click here to reveal e-mail address
Web.: www.sonnenburg.se
================================

-----Ursprungligt meddelande-----
Från: Brad Kingsley [mailto:Click here to reveal e-mail address]
Skickat: den 10 april 2002 13:24
Till: aspngescalate
Ämne: [aspngescalate] Re: Security issue (RESOLVED, but is it a .Net
bug?)(NO ANSWER YET)

I can't comment on why this happened at this particular host, but I can
tell you that we have MANY ASP.Net sites whose folder names are longer
than 8 characters and we have not seen this issue.

~Brad Kingsley
Microsoft MVP - ASP
Windows 2000 MCSE

http://www.orcsweb.com/
Windows 2000 Advanced Hosting
#1 in Service and Support

----- Original Message -----
From: "André Colbiörnsen" <Click here to reveal e-mail address>
To: "aspngescalate" <Click here to reveal e-mail address>
Sent: Wednesday, April 10, 2002 4:28 AM
Subject: [aspngescalate] Security issue (RESOLVED, but is it a .Net
bug?)(NO ANSWER YET)

I have tried to have comments or answers for this during the last weeek,
but noone seems to have an opinion. This is an excerpt of a thread
between my ISP and someone at a Microsoft Security list regarding naming
of folders under IIS which seem to effect only .Net:

/////////////////////////////// Snip ////////////////////////////////

I got the following answer to the problem in the newsgroup
"microsoft.public.dotnet.framework.aspnet.security"

<<<
uh.. "firstweb" has 8 characters... "secondweb" has 9... now.. having
that in mind.. make sure ASPNET account has read permissions on the
whole structure above. kinda weird..

i can't remember what the problem was.. when the directory has more than
8 characters.. try hitting the knowledge base..

PS.. try renaming "firstweb" to "firstweb1" -- see if you get the same
error..
>>>

**************** My comment: This seems to be the core of the problem
***

I thought this was very far fetched but as the directory to your web was
called "\webhot\familylife.se\http\" I decided to tried setting it to
"\webhot\family__.se\http\" in the old MSDos way (8.3) and VOILA it
worked.

**************** My comment: End
****************************************

As I said before, the web worked fine with html and asp pages so I do
not think this is a faulth in the IIS 5 so it must be either an error in
the config of aspdotnet or un bug of some kind. The config we have so
far is the one that comes with the standard install and with this in
mind I would still call it a bug in aspdotnet but thats just me :)

I'm glad that it works now and hope to see some nice prof of what you
can do with this aspdotnet in the near future.

BTW! Please try to get som complaints through to the people in charge of
aspdotnet so that this might get fixed.

/////////////////////////////// Snip ////////////////////////////////

I believe this to be very odd, and hopefully there is another
explanation to this problem than it being a bug. I would appreciate
comments from Microsoft on this, unless of course somebody else can
supply me with a perfectly good explanation.

Regards/Hälsningar

André Colbiörnsen
================================
Sonnenburg Communications
Bergsgatan 3,
SE-211 54 Malmö
Sweden
Tel.: +46-(0)40-97 78 80
Fax.: +46-(0)40-97 78 80
Mob.: +46-(0)708-97 78 79
Mail: Click here to reveal e-mail address
Web.: www.sonnenburg.se
================================

| [aspngescalate] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngescalate.asp = JOIN/QUIT
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]

| [aspngescalate] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngescalate.asp = JOIN/QUIT

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification