Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > november 2007 > threads for november 1 - 7, 2007

Filter by week: 1 2 3 4 5

IIS 6.0 - no host header value - Are host header requests processe
Posted by asmizer at 11/7/2007 8:23:00 AM
IIS 6.0, the site does not have a "host header value" it is the "Default:None". What happens when an initial get request does not contain the site header? E.g The Get comes to my IP address but instead of askign for "mysite.com" it contains "yoursite.com"? Given that mysite.com resolves to ...more >>


IIS - SQL Tables Hacked - http://yl18.net/
Posted by peterjonesp1@googlemail.com at 11/6/2007 8:38:14 AM
On my personal IIS and SQL server running my hobby homepages had a leave me a message set of questions and managed to get my database tables uploaded with - This brought my whole system down, I assumed I had full SQL Inject validation and IIS patching, anyone know of any new vulnerabilies or ...more >>

iis6 and ixsso query problem
Posted by jerome at 11/6/2007 8:25:28 AM
i use the microsoft script to search on indexing server. If i use the property Q.groupBy on my IIS6 machine i have a CreateRecordset erreur '80070057' Paramètre incorrect. /archive/indexation3.asp, ligne 38 if i turn "execute in iis5 mode" or on an other machine it work. If i remove g...more >>

IIS-Script to validate and apply security settings
Posted by Ed Simpson at 11/4/2007 4:41:01 PM
I am looking for script that will validate IIS settings such as, • Log file location • Log file type • Client IP Address • User Name • Method • URI Stem • HTTP Status • Win32 Status • User Agent • Server IP Address • Server Port Determine if “Everyone” failed ac...more >>

Possible to write plug-in to handle password expiry etc.?
Posted by Dylan Nicholson at 11/2/2007 2:01:19 AM
I'm trying to use IIS's Integrated Windows Authentication to take advantage of various user management and security features of Windows, namely password expiry and complexity checking. But currently if your password expires, or the user flag "must change password at next logon" has been set, the...more >>

file extensions and IIS
Posted by Zester at 11/1/2007 3:20:31 PM
Hi, I'm wondering which file extensions are treated as "exposed" and which are "hidden" by the IIS? I was told that the .bak file is exposed so external users can actually browse and see content of files with .bak extension but I couldn't reproduce it. Thanks for your advice and pointers. ...more >>



DevelopmentNow Blog