all groups > iis security > november 2007 > threads for november 1 - 7, 2007
Filter by week: 1 2 3 4 5
IIS 6.0 - no host header value - Are host header requests processe
Posted by asmizer at 11/7/2007 8:23:00 AM
IIS 6.0, the site does not have a "host header value" it is the
"Default:None".
What happens when an initial get request does not contain the site header?
E.g The Get comes to my IP address but instead of askign for "mysite.com" it
contains "yoursite.com"? Given that mysite.com resolves to ... more >>
IIS - SQL Tables Hacked - http://yl18.net/
Posted by peterjonesp1@googlemail.com at 11/6/2007 8:38:14 AM
On my personal IIS and SQL server running my hobby homepages had a
leave me a message set of questions and managed to get my database
tables uploaded with -
This brought my whole system down, I assumed I had full SQL Inject
validation and IIS patching, anyone know of any new vulnerabilies or
... more >>
iis6 and ixsso query problem
Posted by jerome at 11/6/2007 8:25:28 AM
i use the microsoft script to search on indexing server. If i use the property Q.groupBy on my IIS6 machine i have a
CreateRecordset erreur '80070057'
Paramètre incorrect.
/archive/indexation3.asp, ligne 38
if i turn "execute in iis5 mode" or on an other machine it work. If i remove g... more >>
IIS-Script to validate and apply security settings
Posted by Ed Simpson at 11/4/2007 4:41:01 PM
I am looking for script that will validate IIS settings such as,
• Log file location
• Log file type
• Client IP Address
• User Name
• Method
• URI Stem
• HTTP Status
• Win32 Status
• User Agent
• Server IP Address
• Server Port
Determine if “Everyone†failed ac... more >>
Possible to write plug-in to handle password expiry etc.?
Posted by Dylan Nicholson at 11/2/2007 2:01:19 AM
I'm trying to use IIS's Integrated Windows Authentication to take
advantage of various user management and security features of Windows,
namely password expiry and complexity checking.
But currently if your password expires, or the user flag "must change
password at next logon" has been set, the... more >>
file extensions and IIS
Posted by Zester at 11/1/2007 3:20:31 PM
Hi,
I'm wondering which file extensions are treated as "exposed" and which are
"hidden" by the IIS? I was told that the .bak file is exposed so external
users can actually browse and see content of files with .bak extension but I
couldn't reproduce it. Thanks for your advice and pointers.
... more >>
|