OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
OWA (exchange 5.5) broken by patching?

From: Jared Ingersoll (jaredcswv.com)
Date: Thu Apr 15 2004 - 06:57:51 CDT

Hi,

I was wondering if anyone else experienced the problem of Outlook Web Access
breaking (running on win2k/exchange 5.5. sp4) after applying the numerous
patches from MS yesterday (MS04-011 thru 014,
http://www.microsoft.com/technet/security/bulletin/winapr04.mspx)? We use
the IIS lockdown tool on the server, and part of this disables references to
"parent paths" in the asp app. After applying the patches and rebooting,
folks are able to get to the login page, but after entering their
username/pw, they get a script error saying something like:

Active Server Pages error 'ASP 0131'

Disallowed Parent Path

/exchange/USA/inbox/main_fr.asp, line 3

The Include file '../constant.inc' cannot contain '..' to indicate the
parent directory.

The only way to fix this is to enable "parent paths" under the exchange
virtual directory app settings in IIS.

Jared

---------------------------------------------------------------------------
---------------------------------------------------------------------------