Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
OWA (exchange 5.5) broken by patching? Apr 15 2004 11:57AM
Jared Ingersoll (jared cswv com)
Hi,

I was wondering if anyone else experienced the problem of Outlook Web Access
breaking (running on win2k/exchange 5.5. sp4) after applying the numerous
patches from MS yesterday (MS04-011 thru 014,
http://www.microsoft.com/technet/security/bulletin/winapr04.mspx)? We use
the IIS lockdown tool on the server, and part of this disables references to
"parent paths" in the asp app. After applying the patches and rebooting,
folks are able to get to the login page, but after entering their
username/pw, they get a script error saying something like:

Active Server Pages error 'ASP 0131'

Disallowed Parent Path

/exchange/USA/inbox/main_fr.asp, line 3

The Include file '../constant.inc' cannot contain '..' to indicate the
parent directory.

The only way to fix this is to enable "parent paths" under the exchange
virtual directory app settings in IIS.

Jared

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus