IIS Server Security - ISS6 allow executables to be runned

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > April 2004 > ISS6 allow executables to be runned





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author ISS6 allow executables to be runned
Tjeerd van Beek

2004-04-28, 7:34 am

I have made an simple test application in VB.NET which I can't run under IIS6 but under IIS5.1 it doesn't have any problems

I think that the problem is something with security in IIS6 and/or Win2003 Server.
I tried to let IIS run under the administrator account, this gave the same error as the normal IUser.
I have set ofcourse the executable as allowed in the IIS application list.

Does any body know what I am missing or is it not allowed to execute code like this since IIS6

The code:

Imports System.IO

Module TestWin2003IIS6
Sub Main()
Dim returnvalue() As String = Environment.GetCommandLineArgs()
Dim returnvalue2 As String
Try
For i As Integer = 1 To returnvalue.Length - 1
returnvalue2 += returnvalue(i) & vbNewLine
Next
Catch ex As Exception
returnvalue2 = "Error that occured: " & ex.Message & vbNewLine & vbNewLine & ex.StackTrace
End Try

Console.WriteLine("Cache-Control: no-cache")
Console.WriteLine("Content-Type: text/plain; charset=ISO-8859-1")
Console.WriteLine("Accept-Ranges: bytes")
Console.WriteLine("Content-Length: " & returnvalue2.Length)
Console.WriteLine("")
Console.WriteLine(returnvalue2)
End Sub
End Module
Ken Schaefer

2004-04-28, 7:34 am

....and what is the error?!?

Cheers
Ken


"Tjeerd van Beek" <anonymous@discussions.microsoft.com> wrote in message
news:DBE3DD98-08E7-4390-85D1-7EF4CB9A1EEF@microsoft.com...
: I have made an simple test application in VB.NET which I can't run under
IIS6 but under IIS5.1 it doesn't have any problems
:
: I think that the problem is something with security in IIS6 and/or Win2003
Server.
: I tried to let IIS run under the administrator account, this gave the same
error as the normal IUser.
: I have set ofcourse the executable as allowed in the IIS application list.
:
: Does any body know what I am missing or is it not allowed to execute code
like this since IIS6
:
: The code:
:
: Imports System.IO
:
: Module TestWin2003IIS6
: Sub Main()
: Dim returnvalue() As String = Environment.GetCommandLineArgs()
: Dim returnvalue2 As String
: Try
: For i As Integer = 1 To returnvalue.Length - 1
: returnvalue2 += returnvalue(i) & vbNewLine
: Next
: Catch ex As Exception
: returnvalue2 = "Error that occured: " & ex.Message & vbNewLine & vbNewLine
& ex.StackTrace
: End Try
:
: Console.WriteLine("Cache-Control: no-cache")
: Console.WriteLine("Content-Type: text/plain; charset=ISO-8859-1")
: Console.WriteLine("Accept-Ranges: bytes")
: Console.WriteLine("Content-Length: " & returnvalue2.Length)
: Console.WriteLine("")
: Console.WriteLine(returnvalue2)
: End Sub
: End Module


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com