OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Johansen, Eric (ejohansenMARKETWATCH.COM)
Date: Fri Mar 09 2001 - 10:58:03 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    There is no need for this batch file - a simple IISRESET will suffice. It
    stops the web service "gently" then restarts it, the only time the switches
    are needed are if you want to stop the service...do some stuff...then start
    (versus just stopping and starting in one fell swoop). IISRESET.exe is
    located in C:\WINNT\system32 by default.

    -----Original Message-----
    From: Tiago Halm [mailto:thalmLONDONOFFICE.COM]
    Sent: Thursday, March 08, 2001 5:28 PM
    To: BUGTRAQSECURITYFOCUS.COM
    Subject: Re: IIS 5.0 PROPFIND DOS

    While Microsoft is solving this issue and there is no
    patch available, I recommend the following workaround
    successfully tried over IIS 5.0 (Windows 2000) and IIS 5.1 (Whistler).

    Create a batch file (ex: workaround.bat) with the following 2 lines:

    IISRESET /STOP
    IISRESET /START

    save the file in a safe place not acessible by HTTP.

    Then
    1 - Click "Properties" in the "World Wide Web Publishing Service" service
    2 - Choose the "Recovery" tab
    3 - Select the "Run a File" option in the "First Failure" combo box.
    4 - In the "Run file" text box, type the full pathname of your batch file
    created above.
    5 - Repeat this procedure for the "Second failure" and "Subsequent failures"
    combo boxes.

    In case of problems using this approach, any input is appreciated!

    Tiago Halm